Compliance Guide

MQSA 2024 Final Rule

The most significant update to MQSA regulations since 1997: what changed, what it means for your facility, and what compliance looks like now that it is in effect.

Last Reviewed: August 25, 2026

Effective September 10, 2024FDA Final RuleMost Changes Since 1999All Facilities Affected

What the 2024 Final Rule Is and Why It Matters

On March 10, 2023, the FDA published the final rule updating the regulations that implement the Mammography Quality Standards Act (MQSA). Those regulations (which govern every accredited mammography facility in the United States) had not received a comprehensive update since 1997. The new rule took effect on September 10, 2024.

The 2024 Final Rule touches nearly every operational area of a mammography facility: the letters sent to patients, the audit systems used to track physician performance, the qualification records kept for interpreting physicians and technologists, the processes used to retrieve and document pathology results, and the way facilities document and respond to performance that falls outside benchmark ranges.

The single most operationally significant change (the one that required every facility to update its lay letter templates before the compliance date) is the mandatory breast density notification requirement. Under the new rule, every patient who undergoes mammography must receive standardized FDA-prescribed density language in their lay letter, regardless of what state they are in or what the facility was previously doing.

For a facility that was already doing most things right, the 2024 Final Rule was primarily a documentation and template update. For facilities that had been relying on informal audit processes, vague corrective action procedures, or outdated lay letter templates, the rule represents a significant compliance gap that FDA inspectors are now actively checking.

Mar 9, 2023

Rule Published

Sep 10, 2024

Effective Date

6

Major Change Areas

~8,800

Facilities Affected

What Changed: The Six Major Provisions

A detailed look at each area the 2024 Final Rule updated, what the change requires, and what it means operationally for your facility.

01

Mandatory Breast Density Notification

Highest Operational Impact

All patients undergoing mammography must receive an FDA-prescribed breast density statement in their lay summary, regardless of state law. The report classifies density in four categories (A through D), but the lay summary uses two statements: 'not dense' for categories A and B and 'dense' for categories C and D, in the exact wording of 21 CFR 900.12(c)(2)(iii) and (iv). The FDA is not providing alternative wording for those statements.

Operational impact:

Every lay letter template produced after September 10, 2024 must be updated. This affects every facility that performs mammography.

02

Updated Medical Outcome Audit Standards

Audit & Compliance

Strengthened requirements for tracking recall rate (AIR), cancer detection rate (CDR), and positive predictive values (PPV1, PPV2, PPV3) at the individual interpreting physician level. Updated scope to address modern workflows including same-day diagnostic workup. Clarified what audit data must be retained and available for FDA inspection review.

Operational impact:

Facilities with informal audit processes need to formalize tracking, documentation, and annual analysis procedures.

03

Strengthened Corrective Action Requirements

New Documentation Standard

When audit metrics fall outside benchmark ranges, the 2024 Final Rule now requires written documentation of the finding, a formal root cause investigation, a written corrective action plan with specific steps and timelines, implementation of the plan, and a follow-up review at a specified interval. All documentation must be retained for inspection review.

Operational impact:

Facilities that previously handled below-benchmark performance verbally or informally must now document the full corrective action cycle.

04

Revised Personnel Qualification Standards

Personnel Records

Updated initial qualification and continuing experience requirements for interpreting physicians, radiologic technologists, and medical physicists. Adjustments to how mammography volume is calculated for physicians who interpret across multiple modalities. Updated continuing education requirements for technologists. Clarified qualification pathways and survey requirements for medical physicists.

Operational impact:

Facilities needed to review and update personnel qualification documentation for all three personnel categories by the compliance date.

05

Modernized Recordkeeping and Reporting

Digital Records

Updated requirements for electronic image storage, retrieval, patient access to records, and image/report transfer. Added requirements for responding to patient record requests within defined timeframes. Updated retention requirements for different record types. Clarified which records must be available for FDA inspection.

Operational impact:

Facilities operating primarily on paper-based or legacy systems may need workflow and documentation updates to meet the modernized requirements.

06

Updated Communication Requirements

Patient Notification

The 30-day lay letter window is maintained for standard cases. A new 7-day requirement applies to 'Suspicious' and 'Highly Suggestive of Malignancy' assessments; both the written report and the lay summary must reach the healthcare provider and patient within 7 calendar days of the final interpretation. All lay summaries now require the prescribed breast density statement. 'Physician' is replaced throughout by 'healthcare provider.'

Operational impact:

Facilities must implement a fast-track workflow for Suspicious and Highly Suggestive of Malignancy cases. Every letter template requires review for the 7-day rule, density language, and healthcare provider terminology.

The Highest-Impact Provision

Breast Density Notification: What the Rule Actually Requires

Prior to the 2024 Final Rule, breast density notification was governed by a patchwork of state laws, some requiring notification for all patients, some only for patients with dense breasts, some with no requirement at all. The federal rule replaced that inconsistency with a single national standard:

  • Every patient must receive written breast density information in their lay letter, not just patients with dense breasts
  • The FDA prescribes the exact wording of two statements, one for not dense breasts (categories A and B) and one for dense breasts (categories C and D); facilities cannot substitute their own wording
  • Both statements explain that dense tissue makes it harder to find breast cancer on a mammogram and also raises the risk of developing breast cancer; the dense statement adds that other imaging tests may help find cancers
  • The density language must be included in every lay letter, not offered as a separate document or available only on request
  • Facilities in states with existing density laws must comply with the federal requirement even if it is more stringent than state law
  • Digital mammography, tomosynthesis (3D), and all other MQSA-covered modalities are subject to the notification requirement

Category A / B: Not Dense

The 'not dense' statement: dense tissue makes cancer harder to find and raises risk, 'Your breast tissue is not dense,' and a prompt to talk with a healthcare provider about breast density, risk, and the patient's situation.

Category C / D: Dense Breasts

The 'dense' statement: the same explanation, 'Your breast tissue is dense,' a note that other imaging tests in addition to a mammogram may help find cancers, and a prompt to talk with a healthcare provider.

A facility that had not updated its lay letter templates by September 10, 2024 was immediately non-compliant.

Unlike some regulatory changes that allow a grace period or phased enforcement, the breast density notification requirement in the 2024 Final Rule had a hard compliance date. Every lay letter produced on or after September 10, 2024 must include the required density language. There is no phase-in provision and no exemption based on facility size or volume.

Corrective Action: What the New Standard Requires

The strengthened corrective action requirements are among the most operationally demanding changes for facilities that had previously handled below-benchmark performance informally. The new standard requires a documented cycle, not a conversation.

1

Identify the finding

When annual audit analysis shows that a physician's recall rate, CDR, or PPV falls outside the benchmark range, the finding must be formally documented in writing, not handled informally or verbally.

2

Conduct a root cause investigation

The facility must investigate potential contributing factors. Is the deviation driven by case mix, comparison availability, same-day workup methodology, or a genuine threshold issue? The investigation and its findings must be documented.

3

Develop a written corrective action plan

A written plan must be created specifying what steps will be taken, who is responsible, and what the timeline is. The plan must be specific enough to be evaluated; 'physician will review performance' is not sufficient. The plan must describe concrete, measurable actions.

4

Implement the plan

The corrective actions are carried out. This may include case review sessions, peer review of recalled cases, structured educational interventions, comparison image workflows, or adjustment of audit methodology where calculation issues are identified.

5

Follow-up review

At a defined interval, the facility must conduct a follow-up review to determine whether the corrective action improved performance. The follow-up and its outcome must be documented.

6

Retain all documentation for inspection

Every step of the corrective action cycle (finding, investigation, plan, implementation, follow-up) must be documented and retained so that FDA inspectors can review the full record. This documentation is now a standard part of the MQSA inspection protocol.

MQSA 2024 Final Rule: Frequently Asked Questions

Detailed answers to the questions breast imaging facilities ask most often about the 2024 Final Rule requirements, compliance dates, and operational impacts.

The MQSA 2024 Final Rule is the FDA's most comprehensive update to the regulations implementing the Mammography Quality Standards Act (MQSA) since the original regulations were published in 1997. The rule was issued on March 10, 2023 and became effective on September 10, 2024. It updates multiple areas of MQSA compliance: mandatory breast density notification, a codified imaging assessment taxonomy, updated medical outcome audit standards, personnel qualification standards, recordkeeping and reporting requirements, and corrective action requirements. The rule was published in the Federal Register at 88 FR 15126.

The MQSA 2024 Final Rule took effect on September 10, 2024. The FDA issued the final rule on March 10, 2023, giving facilities approximately 18 months to prepare for the compliance date. Facilities that had not updated their lay letter templates, audit processes, personnel records, and corrective action documentation by September 10, 2024 were immediately out of compliance and subject to findings during their next FDA annual inspection.

The most operationally significant change in the 2024 Final Rule is the mandatory breast density notification requirement. Under the new rule, every patient who undergoes mammography must receive standardized breast density information in their lay letter, regardless of whether the facility is in a state that already had its own density notification law. The mammography report classifies density in one of four categories (A through D), but the lay summary must include one of two FDA-prescribed statements: one for not dense breasts (categories A and B) and one for dense breasts (categories C and D). The FDA is not providing alternative wording for those statements. Facilities that had already been producing density-informed lay letters in compliance with state laws still needed to update their templates to match the new federal standardized language.

The MQSA 2024 Final Rule codifies four FDA-defined breast composition assessment categories in 21 CFR §900.12(c)(1)(vi): Category A, 'The breasts are almost entirely fatty'; Category B, 'There are scattered areas of fibroglandular density'; Category C, 'The breasts are heterogeneously dense, which may obscure small masses'; Category D, 'The breasts are extremely dense, which lowers the sensitivity of mammography.' The lay summary uses only two of these, as set out in 21 CFR §900.12(c)(2)(iii) and (iv): categories A and B use the 'not dense' statement and categories C and D use the 'dense' statement. Both statements say that dense tissue makes it harder to find breast cancer on a mammogram and also raises the risk of developing breast cancer, and the dense statement adds that other imaging tests in addition to a mammogram may help find cancers. These FDA categories align with the ACR BI-RADS® breast composition categories (BI-RADS® is a registered trademark of the American College of Radiology). Since July 11, 2025, FDA Alternative Standard 26 also lets the interpreting physician phrase the report's overall density assessment in the singular (for example, 'The breast is almost entirely fatty', intended for unilateral mammograms) or as 'Breast Density: Almost entirely fatty' and the matching forms for the other three categories. The two lay summary statements are the same either way. Apart from approved alternative standards, the FDA's prescribed language is mandatory; facilities cannot substitute their own wording.

The 2024 Final Rule updated the MQSA medical outcome audit requirements in several ways. The rule clarifies the audit metrics that must be tracked and benchmarked (including recall rate, cancer detection rate, and positive predictive values) and strengthens the requirements for individual interpreting physician tracking. The rule also adds more specific requirements for what must happen when a physician's performance falls outside benchmark ranges, including documentation standards for corrective action plans and timelines for follow-up review. Additionally, the rule updated the scope of what must be tracked to better account for modern imaging workflows, including facilities that perform same-day diagnostic workup on screening patients.

The 2024 Final Rule updated personnel qualification standards for all three MQSA personnel categories. For interpreting physicians, the rule revised the initial qualification requirements and updated the continuing experience standards, including adjustments to how mammography volume is calculated for physicians who interpret across multiple imaging modalities. For radiologic technologists, the rule updated continuing education requirements and clarified qualification pathways for technologists trained outside the United States. For medical physicists, the rule updated survey requirements and clarified what constitutes acceptable training and experience for physicists performing evaluations under the new rule. Facilities were required to review and update personnel qualification documentation to confirm compliance by the September 2024 effective date.

The 2024 Final Rule modernized MQSA's recordkeeping and reporting requirements to address the reality that most mammography is now performed, interpreted, and stored digitally. The rule updated requirements for electronic image storage and retrieval, patient access to records, and transfer of images and reports when patients request their records or change facilities. The rule also added requirements for how facilities must respond to patient requests for their mammography records within defined timeframes. Additionally, the rule updated retention requirements for different types of records and clarified which records must be available for FDA inspection review.

The 2024 Final Rule significantly strengthened the corrective action requirements that apply when a facility's or physician's medical audit metrics fall outside benchmark ranges. The new requirements specify that when performance falls outside acceptable ranges, the facility must: document the finding in writing; conduct a root cause investigation; develop a written corrective action plan with specific steps and timelines; implement the plan; and conduct a follow-up review at a specified interval to confirm whether performance has improved. All of this documentation must be retained and available for FDA inspection review. The strengthened corrective action requirements were one of the more operationally demanding changes for facilities that had previously handled below-benchmark performance informally.

Yes, in two ways. The 2024 Final Rule maintained the 30-day window for standard lay letters but added a new 7-day requirement for urgent findings. For any mammogram assessed as 'Suspicious' or 'Highly Suggestive of Malignancy,' both the written report to the healthcare provider and the lay summary to the patient must be provided within 7 calendar days of the final interpretation of the mammograms. The 30-day window, counted from the date of the mammographic examination, applies to all other assessments. What also changed across all lay summaries is content: every patient's lay summary must now include the prescribed breast density statement, 'dense' or 'not dense', matched to the density in the report.

Yes. The MQSA 2024 Final Rule's breast density notification requirement applies to all MQSA-accredited facilities nationwide, including those in states that already had state-level density notification laws. Where a state law requires density notification, the federal MQSA requirement adds a layer: the specific FDA-prescribed statement must be used, because the FDA is not providing alternative wording. In states that require four density categories, a facility may also give patients that information, but it is separate from the notification paragraph the federal rule requires. Some state laws had required only that certain patients receive notification; the federal rule requires that all patients receive notification regardless of density category. Facilities in states with existing laws needed to compare their existing templates against the new federal requirements and update accordingly.

Facilities that perform same-day diagnostic workup (where a screening patient is immediately evaluated during the same visit rather than being recalled for a separate appointment) received updated guidance under the 2024 Final Rule regarding how to account for this workflow in audit metric calculations, particularly recall rate (AIR) and related metrics. The rule clarifies the audit methodology for these facilities to ensure that same-day workup is not inadvertently creating statistical anomalies in their audit data. Facilities with same-day workup capabilities should review their audit calculation methodology against the updated guidance to confirm their AIR and CDR calculations are being handled correctly under the new framework.

The 2024 Final Rule codified a complete imaging assessment taxonomy in 21 CFR §900.12(c)(1), more categories than the BI-RADS® 0-6 shorthand commonly used in clinical practice. The nine FDA-recognized imaging assessment categories are: (A) Negative; (B) Benign; (C) Probably Benign; (D) Suspicious; (E) Highly Suggestive of Malignancy; (F) Known Biopsy-Proven Malignancy; (G) Post-Procedure Mammogram for Marker Placement; and two Incomplete sub-categories, 'Incomplete: Need additional imaging evaluation' and 'Incomplete: Need prior mammograms for comparison.' Category G and both Incomplete sub-types are FDA-recognized assessments with specific regulatory meaning. FDA inspectors reference these imaging assessment categories, not BI-RADS® numbers. (BI-RADS® is a registered trademark of the American College of Radiology.)

Yes. The 2024 Final Rule replaced the term 'physician' throughout 21 CFR Part 900 with 'healthcare provider.' This change reflects the modern mammography referral landscape, where qualified individuals including nurse practitioners, physician assistants, and other licensed providers routinely order mammograms and receive results on behalf of patients. Facilities need to update report templates, lay letters, and communication workflows to use 'healthcare provider' rather than 'referring physician' where the regulations apply.

Facilities that were not in compliance with the MQSA 2024 Final Rule by September 10, 2024 should immediately prioritize bringing their operations into compliance, starting with the highest-visibility requirements: lay letter breast density notification language, medical outcome audit documentation, and personnel qualification records. MQSA inspections are unannounced and annual, and inspectors have been trained to check for 2024 Final Rule compliance in their standard inspection protocols. A facility that receives an inspection finding related to the new rule should respond with a documented corrective action plan within the timeframe specified in the inspection findings. Facilities that are uncertain about their compliance status should conduct an internal review against the full text of the rule and consider seeking compliance support.

How Mammologix Helps

2024 Final Rule Compliance Support for Breast Imaging Centers

Mammologix has supported breast imaging facilities with MQSA-related operational workflows since 1995, long before the 2024 Final Rule. Our work directly addresses the areas most affected by the new requirements: lay letter production with compliant density notification language, medical outcome audit tracking and reporting, corrective action documentation, and year-round inspection readiness.

Lay Letter & Density NotificationCompliant lay letter production including 2024 Final Rule breast density notification language, with the correct statement for dense and not dense breasts.Learn more →Medical Outcome AuditFull audit support: tracking, pathology correlation, metric calculation, physician-level reporting, and corrective action documentation.Learn more →MQSA Policy TemplatesReady-to-use policy templates updated for 2024 Final Rule requirements: corrective action, audit procedures, and personnel qualification documentation.Learn more →MammoComply Knowledge BaseArticles and resources on MQSA compliance, inspection readiness, and audit preparation under the current regulatory framework.Learn more →AIR Score CalculatorCalculate your Abnormal Interpretation Rate and benchmark against ACR targets as required by the updated audit standards.Learn more →2024 MQSA Updates: Quick Reference GuideSection-by-section FROM/TO reference for every 21 CFR Part 900 change: imaging assessments, density notification, enforcement, personnel records, and more.Learn more →What Is MQSA?Plain-language guide to the Mammography Quality Standards Act, the regulatory framework the 2024 Final Rule updates.Learn more →
Talk to Mammologix About Compliance SupportExplore MammoComply

About the Author

RL
Richard D. Lippert, Jr.

Founder, President, and Chief Executive Auditor, Mammologix · Breast Imaging Operations since 1995

A registered radiologic technologist, Richard D. Lippert, Jr., Founder, President, and Chief Executive Auditor of Mammologix, has spent more than 30 years in breast imaging operations, from clinical practice and hospital radiology administration to building specialized service platforms for imaging centers nationwide. His work spans mammography tracking, lay communication, FDA/MQSA-related support, medical outcome audit, and the operational systems that help facilities stay compliant and keep patients from falling through the cracks.

View full bio →

Disclaimer

The content, articles, calculators, tools, estimates, projections, derived data, reports, and other materials provided by Mammologix, LLC, powered by I/O Trak, Inc. (“Mammologix”) are provided for informational and educational purposes only.

The information and outputs provided by Mammologix are not intended to serve as, and should not be relied upon as, medical advice, diagnosis, treatment, clinical guidance, financial advice, investment advice, tax advice, legal advice, accounting advice, or any other professional advice.

Information provided by Mammologix may relate to breast health, mammography, imaging, screening, diagnostics, clinical outcomes, healthcare topics, financial calculations, estimates, projections, or other decision-support information. However, such information should not be used to make personal medical, clinical, financial, investment, business, insurance, legal, or other important decisions without consulting an appropriate qualified professional.

Always seek the advice of a licensed physician, radiologist, healthcare provider, financial advisor, accountant, attorney, or other qualified professional with any questions you may have about a medical condition, screening recommendation, imaging result, treatment option, financial matter, or other professional decision. Never disregard professional medical, financial, legal, or other advice, or delay seeking such advice, because of something you have read, calculated, or received through Mammologix.

Any calculators, formulas, estimates, projections, derived medical outcome data, financial calculations, or other tool-generated outputs are provided as estimates only. Results may be affected by user-entered information, assumptions, formula limitations, incomplete or inaccurate data, rounding, software errors, third-party data, changing medical guidelines, changing financial conditions, changes in law or regulation, or other factors. Mammologix does not represent, warrant, or guarantee that any calculation, output, article, estimate, projection, or derived data is accurate, complete, current, reliable, suitable, or appropriate for any particular purpose.

For medical or health-related content and calculators, Mammologix does not provide medical advice, diagnosis, treatment recommendations, diagnostic interpretation, or patient-specific clinical decision-making. Mammologix content and tools are not a substitute for an in-person evaluation, professional medical consultation, diagnostic interpretation, or individualized care from a licensed healthcare provider. In the event of a medical emergency, contact emergency services or a qualified healthcare provider immediately.

For financial, business, tax, investment, or accounting-related calculators or content, Mammologix does not provide financial, investment, tax, legal, accounting, or business advice. Any outputs are estimates only, and actual results may vary materially based on personal circumstances, market conditions, taxes, fees, interest rates, inflation, risk tolerance, regulatory changes, and other factors.

Use of Mammologix content, articles, calculators, tools, and outputs is at your own risk. You are solely responsible for reviewing, verifying, and interpreting any information or results provided and for obtaining appropriate professional advice before relying on or acting upon such information.

Mammologix assumes no liability for any injury, loss, claim, damage, or expense arising from or related to the use of, reliance on, or inability to use any Mammologix content, article, calculator, tool, estimate, projection, derived data, report, or website material. To the fullest extent permitted by law, Mammologix, its owners, officers, employees, contractors, affiliates, licensors, service providers, and agents disclaim all liability for any direct, indirect, incidental, consequential, special, exemplary, punitive, financial, medical, clinical, business, or other damages arising out of or relating to the use of Mammologix materials or outputs.

The information provided by Mammologix does not establish a doctor-patient, provider-patient, radiologist-patient, financial advisor-client, attorney-client, accountant-client, fiduciary, or other professional relationship.

AI Content Disclosure

Some Mammologix content, calculations, summaries, tools, or outputs may be created, edited, generated, or assisted by artificial intelligence tools or automated systems. While Mammologix may review content for accuracy and relevance, AI-assisted or automated materials may contain errors, omissions, inaccuracies, outdated information, or outputs that are incomplete or inappropriate for a particular user, patient, circumstance, or purpose.

Users should independently verify all AI-assisted content, calculator outputs, and automated results with appropriate qualified professionals before relying on them.

Didn't find what you were looking for?

Our team has supported breast imaging centers since 1995. If it's not here, we probably know the answer.

Ask a Question →