21 CFR Part 820 and FDA QMSR

What Is FDA QMSR (21 CFR Part 820)?

The FDA Quality Management System Regulation (QMSR) establishes the quality management system requirements that medical device manufacturers must follow to consistently produce devices that meet applicable safety and performance requirements. The QMSR is incorporated into 21 CFR Part 820 and aligns FDA's quality system requirements more closely with the internationally recognized ISO 13485 standard.

The transition to QMSR represents a significant change from the previous Quality System Regulation (QSR) framework. Rather than maintaining a largely standalone FDA quality system framework, the regulation incorporates ISO 13485:2016 by reference while retaining additional FDA-specific requirements and provisions.

For medical device manufacturers, understanding 21 CFR Part 820 is important for establishing, implementing, and maintaining an effective quality management system. Organizations selling or distributing medical devices in the United States need to evaluate how the QMSR affects their existing quality processes, documentation, risk management, and compliance activities.

Key Changes Introduced in FDA QMSR

The transition from the previous Quality System Regulation to QMSR introduces several important changes to the way medical device quality systems are structured and assessed.

One of the most significant changes is the incorporation of ISO 13485:2016 into the FDA's regulatory framework. This creates greater alignment between U.S. quality system requirements and the quality management practices already used by manufacturers operating in international markets.

Other important changes include:

Greater emphasis on a risk-based approach to quality management.
Alignment of quality management system requirements with ISO 13485:2016.
Changes to terminology and quality system documentation.
Continued FDA-specific requirements that manufacturers must address in addition to ISO 13485.
Changes to how FDA inspections evaluate a manufacturer's quality management system.
Greater importance of maintaining processes that demonstrate effective control over design, production, suppliers, and other quality-related activities.

Manufacturers should therefore assess their existing quality system rather than assuming that an ISO 13485 certification alone automatically addresses every applicable FDA requirement.

Who Must Comply with FDA QMSR?

The FDA QMSR applies to manufacturers of finished medical devices that are subject to the applicable requirements under the Federal Food, Drug, and Cosmetic Act. Manufacturers should determine the specific regulatory requirements applicable to their devices, operations, and activities.

Compliance is particularly important for organizations involved in the design, manufacture, processing, packaging, labeling, storage, installation, or servicing of applicable medical devices.

Companies transitioning to QMSR should review their existing quality management system to identify gaps between their current processes and the requirements under 21 CFR Part 820, including applicable ISO 13485 requirements and FDA-specific provisions.

A structured gap assessment can help manufacturers determine which procedures, records, responsibilities, and quality processes need to be updated.

How FDA QMSR Aligns with ISO 13485

A major objective of QMSR is to bring FDA quality system requirements into closer alignment with ISO 13485:2016. ISO 13485 provides an internationally recognized framework for establishing and maintaining a quality management system specifically for medical devices.

Under QMSR, ISO 13485:2016 is incorporated by reference into the regulation. This means manufacturers familiar with ISO 13485 may already have many of the processes needed to support compliance.

However, manufacturers should not assume that an ISO 13485 certification by itself means they have satisfied every FDA requirement. FDA-specific provisions and applicable statutory or regulatory requirements still need to be considered.

The alignment can help organizations that operate across multiple markets by reducing unnecessary differences between their U.S. quality management processes and internationally implemented quality systems.

Core Requirements Under FDA 21 CFR Part 820

The requirements under FDA 21 CFR Part 820 are designed to ensure that manufacturers establish and maintain processes capable of consistently producing medical devices that meet specified requirements.

Under the QMSR framework, manufacturers should pay particular attention to areas such as:

Quality management system: Establishing and maintaining processes necessary to control and manage quality-related activities.
Risk management: Identifying and controlling risks associated with medical devices and their manufacturing processes.
Design and development: Establishing appropriate controls over the design and development of devices.
Supplier controls: Evaluating and controlling suppliers and externally provided processes where they can affect product quality.
Production and process controls: Ensuring manufacturing processes are appropriately controlled and monitored.
Document and record control: Maintaining appropriate documentation and records to demonstrate conformity and effective implementation of the quality system.
Corrective and preventive activities: Identifying quality problems, investigating their causes, and implementing appropriate corrective actions.
Monitoring and measurement: Using appropriate information and quality data to evaluate the effectiveness of the quality management system.

Manufacturers should interpret these requirements within the complete QMSR framework rather than treating individual requirements as isolated compliance activities.

Design Controls Under FDA QMSR

Design and development controls are an important component of a medical device quality management system because they help ensure that design outputs meet defined requirements and that potential risks are appropriately addressed.

Under the QMSR framework, manufacturers should establish processes for planning, controlling, reviewing, verifying, validating, and documenting design and development activities as applicable to their devices.

Effective design controls can help organizations:

Define clear design and user requirements.
Identify and manage design-related risks.
Establish appropriate design inputs and outputs.
Verify that design outputs meet specified requirements.
Validate that the resulting device meets user needs and intended uses.
Manage design changes in a controlled manner.
Maintain appropriate design and development records.

Design controls should also work together with risk management activities so that identified risks are considered throughout the device development lifecycle.

Common FDA QMSR Compliance Challenges

Transitioning to QMSR can present challenges for manufacturers that have historically followed the previous QSR framework or have an ISO 13485 quality system that has not been assessed against FDA-specific requirements.

Some common challenges include:

Understanding the Relationship Between QMSR and ISO 13485- Manufacturers need to understand which requirements are addressed through ISO 13485 and which additional FDA requirements may apply to their operations.
Updating Quality System Documentation- Existing procedures, forms, records, and other quality documents may need to be reviewed and updated to reflect the organization's QMSR implementation.
Conducting a Quality System Gap Assessment- A detailed gap assessment can help identify areas where current processes may not adequately address the applicable requirements.
Maintaining Effective Risk Management- Risk management should be integrated into relevant quality processes rather than treated as a standalone documentation exercise.
Preparing Employees for the Transition- Employees responsible for quality, regulatory, engineering, manufacturing, and other relevant functions should understand how the updated requirements affect their responsibilities.

FDA QMSR Inspections: What Manufacturers Should Expect

The transition to QMSR also changes the regulatory framework against which FDA assesses a manufacturer's quality management system.

Manufacturers should be prepared to demonstrate that their quality processes are effectively implemented and supported by appropriate documentation and records. During an inspection, organizations may need to demonstrate how their quality management system operates in practice rather than simply providing documented procedures.

Preparation should therefore include reviewing key quality processes, ensuring records are complete and traceable, confirming that employees understand applicable procedures, and addressing identified quality system gaps.

Manufacturers can also conduct internal audits or mock inspections to identify potential weaknesses before an FDA inspection occurs.

A proactive approach helps organizations move beyond simply maintaining documentation toward demonstrating that their quality management system is consistently implemented and effective.

FAQs About 21 CFR 820

1. What is the difference between QSR and FDA QMSR?

The Quality System Regulation (QSR) was the FDA's previous quality system framework for medical device manufacturers. QMSR updates this framework and incorporates ISO 13485:2016 by reference, creating greater alignment between FDA quality system requirements and the internationally recognized medical device quality management standard.

2. How does QMSR FDA align with ISO 13485?

QMSR aligns with ISO 13485:2016 by incorporating the standard by reference into the FDA's quality management system requirements. This provides greater consistency between the quality systems used by manufacturers in the United States and those operating under international medical device regulations.

However, manufacturers must also consider applicable FDA-specific requirements rather than relying solely on ISO 13485 certification.

3. Who is required to comply with FDA QMSR?

The regulation applies to manufacturers of finished medical devices that are subject to the applicable FDA quality system requirements. The exact compliance obligations depend on the type of device and the activities performed by the organization.

Manufacturers should assess the requirements applicable to their specific products and operations.

4. What are the major changes introduced in FDA QMSR?

The most significant change is the incorporation of ISO 13485:2016 into the FDA quality management system framework. The transition also affects how manufacturers structure and document their quality systems and how they should prepare for FDA inspections.

Organizations should conduct a detailed assessment of their existing QSR or ISO 13485-based quality system to identify any gaps requiring attention.

5. Does FDA QMSR replace 21 CFR Part 820?

No. QMSR is implemented through 21 CFR Part 820. Rather than replacing Part 820 with an entirely separate regulation, FDA revised the framework and incorporated ISO 13485:2016 by reference while retaining applicable FDA-specific requirements.