Under the current wording of laws (as of last November, when I researched Jack and the pacemaker hacks for an ethical position paper), any software updates to such systems technically count as a modification that would require recertification of the equipment by the FDA or other bodies involved in such certifications.