In short:

A new focus is to be on data integrity, in particular the requirements for "data in motion", and data in archives or in backup, the so called "data at rest". The requirements for providers of e.g., cloud services are also to go into more detail and the meaning of "validation and qualification of the systems" is to be clarified in greater depth. This also applies to the term "commercial off-the-shelf products". References to ICH Q9 and thus to quality risk management will also be added.

In addition to these classic topics, developments in the field of artificial intelligence will be included in the future. There are currently no regulatory guidelines or expectations for AI (artificial intelligence) or ML (machine learning). The main focus here should be on the relevance, appropriateness and integrity of the data with which these models are tested and, on the results (metrics) of such tests.

Of interest is a reference (33.) to the FDA's draft document "Computer Software Assurance for Production and Quality System Software", which was recently published. This important US document is to be reviewed for possible regulatory relevance to Annex 11.

The timeline for a new Annex 11:
The consultation period ends on 16 January 2023, with a draft document to be released for consultation in December 2024. Finalisation of the document is planned for 2026.

Source:

EMA: Concept paper on EU Annex 11 on Computerised Systems