QMSR / 21 CFR 820

The FDA Quality Management System Regulation (QMSR), published in February 2024 and effective February 2, 2026, is a landmark revision to FDA's quality system requirements for medical device manufacturers. It replaces 21 CFR Part 820 as the primary FDA QMS regulation.

The QMSR's core innovation is harmonization with ISO 13485:2016 — rather than maintaining a separate FDA-specific QMS framework, FDA has incorporated ISO 13485 by reference and added FDA-specific requirements as supplements. A manufacturer with an ISO 13485-compliant QMS is well-positioned for QMSR compliance.

The transition affects all domestic manufacturers and importers of finished medical devices, and foreign manufacturers whose devices are imported into the United States. The QMSR applies to Class I, II, and III devices alike.

Management Responsibility: Top management must establish quality policy, define organizational roles, and conduct management reviews — requirements familiar from ISO 13485 with FDA-specific recordkeeping expectations.

Design and Development Controls: The most commonly cited area in FDA inspections. The QMSR maintains Design History File (DHF) requirements and the design control procedures of 21 CFR 820.30, integrated with ISO 13485 Section 7.3.

Production and Process Controls: Procedures for controlling all production and service processes, including equipment qualification, process validation, and environmental controls.

CAPA (Corrective and Preventive Action): Systematic processes for identifying, investigating, and resolving quality problems and preventing recurrence — with FDA-specific investigation depth requirements.

Complaint Handling and MDR Reporting: Procedures for receiving, reviewing, and evaluating complaints, and for reporting MDR-reportable events to FDA under 21 CFR Part 803.

Document and Records Control: Control of quality documents and maintenance of quality records in a manner that ensures accessibility and traceability.

Incorporation by Reference: ISO 13485:2016 is incorporated into the QMSR — manufacturers can reference ISO 13485 directly in their QMS documentation, eliminating the need to maintain parallel FDA and ISO frameworks.

Software Validation: The QMSR references updated FDA software guidance, including expectations for software validation that align with IEC 62304 for medical device software.

Risk Management: The QMSR explicitly references risk management throughout, strengthening the connection between quality system activities and ISO 14971 risk management.

Records: QMSR clarifies electronic records requirements, referencing 21 CFR Part 11 for electronic signatures and records in regulatory submissions.

The QMSR became effective February 2, 2026, replacing 21 CFR Part 820. Manufacturers were expected to have transitioned their QMS by this date.

Manufacturers with ISO 13485 certification had the smoothest transition path — their existing QMS structure largely satisfies QMSR requirements, with gap closure needed primarily for FDA-specific supplements (DHF, MDR reporting, complaint handling specifics).

Manufacturers operating under legacy 21 CFR Part 820 without ISO 13485 certification faced more significant transition work — needing to restructure QMS documentation to align with ISO 13485's clause structure while preserving FDA-specific requirements.