As far as I know pretty much all update to critical system will always be told to the government and cause a 'recall'. But I'm not 100% on what the actual regulatory requirement are.