What is the MQSA 2024 Final Rule?

The MQSA 2024 Final Rule is the FDA's most comprehensive update to the regulations implementing the Mammography Quality Standards Act (MQSA) since the original regulations were published in 1997. The rule was finalized on March 9, 2023 and became effective on September 10, 2024. It updates multiple areas of MQSA compliance: mandatory breast density notification, a codified imaging assessment taxonomy, updated medical outcome audit standards, personnel qualification standards, recordkeeping and reporting requirements, and corrective action requirements. The rule was published in the Federal Register at 88 FR 15126.

When did the MQSA 2024 Final Rule take effect?

The MQSA 2024 Final Rule took effect on September 10, 2024. The FDA published the final rule on March 9, 2023, giving facilities approximately 18 months to prepare for the compliance date. Facilities that had not updated their lay letter templates, audit processes, personnel records, and corrective action documentation by September 10, 2024 were immediately out of compliance and subject to findings during their next FDA annual inspection.

What is the most significant change in the MQSA 2024 Final Rule?

The most operationally significant change in the 2024 Final Rule is the mandatory breast density notification requirement. Under the new rule, every patient who undergoes mammography must receive standardized breast density information in their lay letter — regardless of whether the facility is in a state that already had its own density notification law. The FDA prescribes specific language for each of the four density categories (A through D), and that language must be used verbatim or in a format that conveys the same meaning. Facilities that had already been producing density-informed lay letters in compliance with state laws still needed to update their templates to match the new federal standardized language.

What are the four breast density categories in the MQSA 2024 Final Rule?

The MQSA 2024 Final Rule codifies four FDA-defined breast composition assessment categories in 21 CFR §900.12(c)(1)(vi): Category A — 'The breasts are almost entirely fatty'; Category B — 'There are scattered areas of fibroglandular density'; Category C — 'The breasts are heterogeneously dense, which may obscure small masses'; Category D — 'The breasts are extremely dense, which lowers the sensitivity of mammography.' For Categories C and D, the required lay letter language must inform the patient that dense breast tissue can make it harder to find cancer on a mammogram and may be associated with increased risk. These FDA categories align with the ACR BI-RADS® breast composition categories (BI-RADS® is a registered trademark of the American College of Radiology). The FDA's prescribed language is mandatory — facilities cannot substitute their own wording.

What changed in the medical outcome audit requirements under the 2024 Final Rule?

The 2024 Final Rule updated the MQSA medical outcome audit requirements in several ways. The rule clarifies the audit metrics that must be tracked and benchmarked — including recall rate, cancer detection rate, and positive predictive values — and strengthens the requirements for individual interpreting physician tracking. The rule also adds more specific requirements for what must happen when a physician's performance falls outside benchmark ranges, including documentation standards for corrective action plans and timelines for follow-up review. Additionally, the rule updated the scope of what must be tracked to better account for modern imaging workflows, including facilities that perform same-day diagnostic workup on screening patients.

What changed in the personnel qualification requirements?

The 2024 Final Rule updated personnel qualification standards for all three MQSA personnel categories. For interpreting physicians, the rule revised the initial qualification requirements and updated the continuing experience standards, including adjustments to how mammography volume is calculated for physicians who interpret across multiple imaging modalities. For radiologic technologists, the rule updated continuing education requirements and clarified qualification pathways for technologists trained outside the United States. For medical physicists, the rule updated survey requirements and clarified what constitutes acceptable training and experience for physicists performing evaluations under the new rule. Facilities were required to review and update personnel qualification documentation to confirm compliance by the September 2024 effective date.

What changed in the recordkeeping and reporting requirements?

The 2024 Final Rule modernized MQSA's recordkeeping and reporting requirements to address the reality that most mammography is now performed, interpreted, and stored digitally. The rule updated requirements for electronic image storage and retrieval, patient access to records, and transfer of images and reports when patients request their records or change facilities. The rule also added requirements for how facilities must respond to patient requests for their mammography records within defined timeframes. Additionally, the rule updated retention requirements for different types of records and clarified which records must be available for FDA inspection review.

Did the 2024 Final Rule change the lay letter timeline requirements?

Yes — in two ways. The 2024 Final Rule maintained the 30-day window for standard lay letters but added a new 7-day requirement for urgent findings. For any mammogram assessed as 'Suspicious' (Category D) or 'Highly Suggestive of Malignancy' (Category E), both the written report to the healthcare provider and the lay letter to the patient must be provided within 7 days of the examination. The 30-day window applies to all other assessment categories. What also changed across all letters is content — the mandatory breast density notification language must now be included in every lay letter regardless of the patient's density category.

Does the 2024 Final Rule affect facilities in states that already had breast density notification laws?

Yes. The MQSA 2024 Final Rule's breast density notification requirement applies to all MQSA-accredited facilities nationwide — including those in states that already had state-level density notification laws. Where a state law requires density notification, the federal MQSA requirement adds a layer: the specific FDA-prescribed standardized language must be used (or language conveying the same meaning in the same context). Some state laws had required only that certain patients receive notification; the federal rule requires that all patients receive notification regardless of density category. Facilities in states with existing laws needed to compare their existing templates against the new federal requirements and update accordingly.

How does the 2024 Final Rule affect same-day diagnostic workup facilities?

Facilities that perform same-day diagnostic workup — where a screening patient is immediately evaluated during the same visit rather than being recalled for a separate appointment — received updated guidance under the 2024 Final Rule regarding how to account for this workflow in audit metric calculations, particularly recall rate (AIR) and related metrics. The rule clarifies the audit methodology for these facilities to ensure that same-day workup is not inadvertently creating statistical anomalies in their audit data. Facilities with same-day workup capabilities should review their audit calculation methodology against the updated guidance to confirm their AIR and CDR calculations are being handled correctly under the new framework.

What is the complete FDA imaging assessment taxonomy under the 2024 Final Rule?

The 2024 Final Rule codified a complete imaging assessment taxonomy in 21 CFR §900.12(c)(1) — more categories than the BI-RADS® 0–6 shorthand commonly used in clinical practice. The nine FDA-recognized imaging assessment categories are: (A) Negative; (B) Benign; (C) Probably Benign; (D) Suspicious; (E) Highly Suggestive of Malignancy; (F) Known Biopsy-Proven Malignancy; (G) Post-Procedure Mammogram for Marker Placement; and two Incomplete sub-categories — 'Incomplete: Need additional imaging evaluation' and 'Incomplete: Need prior mammograms for comparison.' Category G and both Incomplete sub-types are FDA-recognized assessments with specific regulatory meaning. FDA inspectors reference these imaging assessment categories — not BI-RADS® numbers. (BI-RADS® is a registered trademark of the American College of Radiology.)

Does the 2024 Final Rule change who can order or receive mammography results?

Yes. The 2024 Final Rule replaced the term 'physician' throughout 21 CFR Part 900 with 'healthcare provider.' This change reflects the modern mammography referral landscape, where qualified individuals including nurse practitioners, physician assistants, and other licensed providers routinely order mammograms and receive results on behalf of patients. Facilities need to update report templates, lay letters, and communication workflows to use 'healthcare provider' rather than 'referring physician' where the regulations apply.

What should a facility do if it was not compliant by the September 10, 2024 effective date?

Facilities that were not in compliance with the MQSA 2024 Final Rule by September 10, 2024 should immediately prioritize bringing their operations into compliance, starting with the highest-visibility requirements: lay letter breast density notification language, medical outcome audit documentation, and personnel qualification records. MQSA inspections are unannounced and annual, and inspectors have been trained to check for 2024 Final Rule compliance in their standard inspection protocols. A facility that receives an inspection finding related to the new rule should respond with a documented corrective action plan within the timeframe specified in the inspection findings. Facilities that are uncertain about their compliance status should conduct an internal review against the full text of the rule and consider seeking compliance support.

Compliance Guide

MQSA 2024 Final Rule

Q: What are the new corrective action requirements in the 2024 Final Rule?

The 2024 Final Rule significantly strengthened the corrective action requirements that apply when a facility's or physician's medical audit metrics fall outside benchmark ranges. The new requirements specify that when performance falls outside acceptable ranges, the facility must: document the finding in writing; conduct a root cause investigation; develop a written corrective action plan with specific steps and timelines; implement the plan; and conduct a follow-up review at a specified interval to confirm whether performance has improved. All of this documentation must be retained and available for FDA inspection review. The strengthened corrective action requirements were one of the more operationally demanding changes for facilities that had previously handled below-benchmark performance informally.

The most significant update to MQSA regulations since 1997 — what changed, what it means for your facility, and what compliance looks like now that it is in effect.

Effective September 10, 2024FDA Final RuleMost Changes Since 1999All Facilities Affected

What the 2024 Final Rule Is and Why It Matters

On March 9, 2023, the FDA published the final rule updating the regulations that implement the Mammography Quality Standards Act (MQSA). Those regulations — which govern every accredited mammography facility in the United States — had not received a comprehensive update since 1997. The new rule took effect on September 10, 2024.

The 2024 Final Rule touches nearly every operational area of a mammography facility: the letters sent to patients, the audit systems used to track physician performance, the qualification records kept for interpreting physicians and technologists, the processes used to retrieve and document pathology results, and the way facilities document and respond to performance that falls outside benchmark ranges.

The single most operationally significant change — the one that required every facility to update its lay letter templates before the compliance date — is the mandatory breast density notification requirement. Under the new rule, every patient who undergoes mammography must receive standardized FDA-prescribed density language in their lay letter, regardless of what state they are in or what the facility was previously doing.

For a facility that was already doing most things right, the 2024 Final Rule was primarily a documentation and template update. For facilities that had been relying on informal audit processes, vague corrective action procedures, or outdated lay letter templates, the rule represents a significant compliance gap that FDA inspectors are now actively checking.

Mar 9, 2023

Rule Published

Sep 10, 2024

Effective Date

Major Change Areas

~8,800

Facilities Affected

What Changed — The Six Major Provisions

A detailed look at each area the 2024 Final Rule updated, what the change requires, and what it means operationally for your facility.

Mandatory Breast Density Notification

Highest Operational Impact

All patients undergoing mammography must receive standardized FDA-prescribed breast density language in their lay letter — regardless of state law. The FDA specifies the exact language for each of the four density categories (A through D). Categories C and D (dense breasts) require language explicitly stating that dense tissue may obscure masses and may be associated with increased cancer risk. Facilities must use the prescribed language verbatim or in a form conveying the same meaning.

Operational impact:

Every lay letter template produced after September 10, 2024 must be updated. This affects every facility that performs mammography.

Updated Medical Outcome Audit Standards

Audit & Compliance

Strengthened requirements for tracking recall rate (AIR), cancer detection rate (CDR), and positive predictive values (PPV1, PPV2, PPV3) at the individual interpreting physician level. Updated scope to address modern workflows including same-day diagnostic workup. Clarified what audit data must be retained and available for FDA inspection review.

Operational impact:

Facilities with informal audit processes need to formalize tracking, documentation, and annual analysis procedures.

Strengthened Corrective Action Requirements

New Documentation Standard

When audit metrics fall outside benchmark ranges, the 2024 Final Rule now requires written documentation of the finding, a formal root cause investigation, a written corrective action plan with specific steps and timelines, implementation of the plan, and a follow-up review at a specified interval. All documentation must be retained for inspection review.

Operational impact:

Facilities that previously handled below-benchmark performance verbally or informally must now document the full corrective action cycle.

Revised Personnel Qualification Standards

Personnel Records

Updated initial qualification and continuing experience requirements for interpreting physicians, radiologic technologists, and medical physicists. Adjustments to how mammography volume is calculated for physicians who interpret across multiple modalities. Updated continuing education requirements for technologists. Clarified qualification pathways and survey requirements for medical physicists.

Operational impact:

Facilities needed to review and update personnel qualification documentation for all three personnel categories by the compliance date.

Modernized Recordkeeping and Reporting

Digital Records

Updated requirements for electronic image storage, retrieval, patient access to records, and image/report transfer. Added requirements for responding to patient record requests within defined timeframes. Updated retention requirements for different record types. Clarified which records must be available for FDA inspection.

Operational impact:

Facilities operating primarily on paper-based or legacy systems may need workflow and documentation updates to meet the modernized requirements.

Updated Communication Requirements

Patient Notification

The 30-day lay letter window is maintained for standard cases. A new 7-day requirement applies to 'Suspicious' (Category D) and 'Highly Suggestive of Malignancy' (Category E) — both the written report and lay letter must reach the healthcare provider and patient within 7 days of the examination. All letters now require mandatory breast density notification language. 'Physician' is replaced throughout by 'healthcare provider.'

Operational impact:

Facilities must implement a fast-track workflow for Category D and E cases. Every letter template requires review for the 7-day rule, density language, and healthcare provider terminology.

The Highest-Impact Provision

Breast Density Notification — What the Rule Actually Requires

Prior to the 2024 Final Rule, breast density notification was governed by a patchwork of state laws — some requiring notification for all patients, some only for patients with dense breasts, some with no requirement at all. The federal rule replaced that inconsistency with a single national standard:

Every patient must receive written breast density information in their lay letter — not just patients with dense breasts
The FDA prescribes the specific language for each of the four density categories (A, B, C, D) — facilities cannot substitute their own wording
Categories C and D require language stating dense tissue may obscure masses on mammography and may be associated with increased breast cancer risk
The density language must be included in every lay letter, not offered as a separate document or available only on request
Facilities in states with existing density laws must comply with the federal requirement even if it is more stringent than state law
Digital mammography, tomosynthesis (3D), and all other MQSA-covered modalities are subject to the notification requirement

Category A / B — Not Dense

Required language informs patient of their density category. No specific cancer risk language required for A and B.

Category C / D — Dense Breasts

Required language must specifically state dense tissue may obscure masses AND may be associated with increased cancer risk. Both statements required.

A facility that had not updated its lay letter templates by September 10, 2024 was immediately non-compliant.

Unlike some regulatory changes that allow a grace period or phased enforcement, the breast density notification requirement in the 2024 Final Rule had a hard compliance date. Every lay letter produced on or after September 10, 2024 must include the required density language. There is no phase-in provision and no exemption based on facility size or volume.

Corrective Action — What the New Standard Requires

The strengthened corrective action requirements are among the most operationally demanding changes for facilities that had previously handled below-benchmark performance informally. The new standard requires a documented cycle — not a conversation.

Identify the finding

When annual audit analysis shows that a physician's recall rate, CDR, or PPV falls outside the benchmark range, the finding must be formally documented in writing — not handled informally or verbally.

Conduct a root cause investigation

The facility must investigate potential contributing factors. Is the deviation driven by case mix, comparison availability, same-day workup methodology, or a genuine threshold issue? The investigation and its findings must be documented.

Develop a written corrective action plan

A written plan must be created specifying what steps will be taken, who is responsible, and what the timeline is. The plan must be specific enough to be evaluated — 'physician will review performance' is not sufficient. The plan must describe concrete, measurable actions.

Implement the plan

The corrective actions are carried out. This may include case review sessions, peer review of recalled cases, structured educational interventions, comparison image workflows, or adjustment of audit methodology where calculation issues are identified.

Follow-up review

At a defined interval, the facility must conduct a follow-up review to determine whether the corrective action improved performance. The follow-up and its outcome must be documented.

Retain all documentation for inspection

Every step of the corrective action cycle — finding, investigation, plan, implementation, follow-up — must be documented and retained so that FDA inspectors can review the full record. This documentation is now a standard part of the MQSA inspection protocol.

MQSA 2024 Final Rule — Frequently Asked Questions

Detailed answers to the questions breast imaging facilities ask most often about the 2024 Final Rule requirements, compliance dates, and operational impacts.

BI-RADS® is a registered trademark of the American College of Radiology.

How Mammologix Helps

2024 Final Rule Compliance Support for Breast Imaging Centers

Mammologix has supported breast imaging facilities with MQSA-related operational workflows since 1995 — long before the 2024 Final Rule. Our work directly addresses the areas most affected by the new requirements: lay letter production with compliant density notification language, medical outcome audit tracking and reporting, corrective action documentation, and year-round inspection readiness.

Lay Letter & Density NotificationCompliant lay letter production including 2024 Final Rule breast density notification language for all four density categories.Learn more →Medical Outcome AuditFull audit support — tracking, pathology correlation, metric calculation, physician-level reporting, and corrective action documentation.Learn more →MQSA Policy TemplatesReady-to-use policy templates updated for 2024 Final Rule requirements — corrective action, audit procedures, and personnel qualification documentation.Learn more →MammoComply Knowledge BaseArticles and resources on MQSA compliance, inspection readiness, and audit preparation under the current regulatory framework.Learn more →AIR Score CalculatorCalculate your Abnormal Interpretation Rate and benchmark against ACR targets as required by the updated audit standards.Learn more →2024 MQSA Updates — Quick Reference GuideSection-by-section FROM/TO reference for every 21 CFR Part 900 change — imaging assessments, density notification, enforcement, personnel records, and more.Learn more →What Is MQSA?Plain-language guide to the Mammography Quality Standards Act — the regulatory framework the 2024 Final Rule updates.Learn more →

Talk to Mammologix About Compliance Support Explore MammoComply

About the Author

Richard “Rick” Lippert Jr.

ARRT · President & Founder, Mammologix · Breast Imaging Operations since 1995

A registered radiologic technologist and founder of Mammologix, Rick Lippert has spent more than 30 years in breast imaging operations — from clinical practice and hospital radiology administration to building specialized service platforms for imaging centers nationwide. His work spans mammography tracking, lay communication, FDA/MQSA-related support, medical outcome audit, and the operational systems that help facilities stay compliant and keep patients from falling through the cracks.

View full bio →