Quality Management
FDA Quality Management System Regulation (QMSR) Overview
The medical device market in the US requires understanding the updated rules post transition in the US devices fall under the regulation of the new FDA Quality Management System Regulation (QMSR) established on February 2, 2026. The rule harmonizes the FDA framework by incorporating international standards ISO 13485:2016. The previous 21 CFR Part 820 Quality System Regulation and legacy terms like DMR, DHF, or DHR do not apply in the US anymore.This updated quality management system regulation is closely aligned to international standards to ease corporate responsibility. However, if any clause of ISO 13485 with the FD&C Act, the US laws apply.
US Regulatory and FDA Quality Management System Regulation Compliance for Medical Devices
When selling finished devices in the US market, manufacturers must follow ISO 13485:2016 as a framework and implement risk management. The mandates under the FDA Quality Management System Regulation apply to all finished device manufacturers including components like blood tubing and diagnostic x-ray components because they act as accessories. Devices exempt from CGMP under 21 CFR 862 to 892 do not get full exemptions as they must still keep complaint files and general recordkeeping under US FDA 21 CFR Part 820. For clinical stage or investigational devices manufactured under an IDE, design exemptions do not apply and they must follow full design and development rules under Clause 7 of ISO 13485.
Inspectional Framework and Enforcement under US FDA 21 CFR Part 820
For inspections the U.S. Food and Drug Administration transitioned to an upgraded process effective February 2, 2026. The old QSIT mechanism and older compliance documents do not apply anymore. Instead audits are executed under the updated Compliance Program: 7382.850. Our specialized review ensures your team understands how the US FDA 21 CFR Part 820 updates affect your current audit readiness. Overseas manufacturers must map their systems using text mappings like AAMI TIR102:2019 and IMDRF to pass audits.
The rules apply to foreign entities performing contract sterilization, installation, relabeling, remanufacturing, repacking, specification development, or initial distribution. If a foreign entity fails to meet FDA Quality Management System Regulation requirements, the device is classified as adulterated under section 501(h) and faces refusal of admission under section 801(a).
Redundancy Reductions and Supplementary U.S. Mandates
For European and overseas companies holding a CE mark or international approvals, the modern quality management system regulation framework eliminates redundant technical and administrative efforts. It reduces corporate burdens associated with preparing separate documents, duplicative internal quality audits, separate management reviews, and disconnected training pipelines. However, compliance cannot be achieved by adhering exclusively to ISO 13485 as supplementary US mandates from the U.S. Food and Drug Administration apply.
Manufacturers must document systems in their QMS to:
Assign UDIs (21 CFR Part 830)
Track devices (21 CFR Part 821)
Report complaints (21 CFR Part 803)
Manage recalls and field corrections (21 CFR Part 806)
Structural Evolution of Technical Records
The QMSR changes how technical files are defined by completely reserved legacy terminology. Overseas manufacturers are no longer required to organize records under old 21 CFR Part 820 Quality System Regulation structures like DMR, DHF, or DHR. Device specifications and manufacturing procedures are consolidated into the Medical Device File (MDF) per Clause 4.2.3 of ISO 13485. Design evolution records are housed within the Design and Development File per Clause 7.3.10 and manufacturing are maintained as part of the Medical Device or Batch Record under Clause 7.5.1. Historical inspector exemptions for internal quality audits, supplier audits, and management reviews do not apply anymore and must be made fully accessible to the U.S. Food and Drug Administration investigators.
ISO Certification Boundaries and Inspection Controls
Holding a third-party certificate of conformance to ISO 13485 does not exempt a firm from FDA oversight. The FDA will not accept an ISO 13485 certificate as a standalone substitute for routine surveillance nor will it issue its own certificates of conformity. While the FDA participates in MDSAP and utilizes third-party MDSAP audit reports to potentially defer routine surveillance, standard non-MDSAP ISO audits are unmonitored by the Agency. Standard ISO certification bodies do not verify a firm's adherence to specific US device laws like Parts 803, 806, 821, and 830, meaning the FDA maintains independent statutory authority to conduct on-site physical inspections under section 704.
Timelines, Costs, and Economic Impact of 21 CFR Part 820 Quality System Regulation
The FDA Quality Management System Regulation is officially here. Following a two-year transition period that wrapped up on February 2, 2026, full compliance with the updated US FDA 21 CFR Part 820 is now mandatory. The FDA rejected requests for a phased implementation based on device risk classification or company size to avoid regulatory confusion. Firms faced an initial one-time learning burden of 2.22 hours for a regulatory affairs expert to interpret the rule, equating to an industry onboarding cost of $9,858,780. For companies whose operating models do not align with ISO 13485, an additional transition burden averaging 64 hours per recordkeeper was required, totaling $49,871,733. However, from a long-term perspective, the rule introduces annualized net cost savings of approximately $532 million driven by the reduction of duplicative international compliance.
How a Quality Management System Consultant Can Help
At Morulaa Health Tech, we act as your dedicated quality management system consultant to help medical device companies set up quality systems and prepare for manufacturing. Our team understands current regulations, helping you design devices and processes that meet FDA and ISO standards.
As an experienced quality management system consultant, we know how to streamline your transition to the new framework. If you need to meet modern quality management system regulation compliance, our quality management system consultant team can help with
Product development
Design controls and risk management
Manufacturing process development and validation
Quality and regulatory compliance
Frequently Asked Questions (FAQs)
Why is the FDA making this QSR to QSMR changes?
The FDA wants to improve the quality and safety of medical devices for patients. This update combines key parts of a manufacturer's Quality Management System and US rules with international standards.
How to prepare for the FDA Quality Management System Regulation?
The Agency is updating its IT systems, creating a new inspection process, changing related rules, and teaching its staff and stakeholders about the updates.
What training will FDA staff receive?
Staff will be trained on the final rule, the new inspection process, and changes to policies. The FDA will also continue internal training to keep staff familiar with quality system concepts.
How does this impact FDA programs?
The FDA will still check device safety by doing inspections that use these new rules. The change also requires updates to internal training, procedures, and policies.
What if the ISO standard changes later?
The FDA will look at any future updates to the ISO standard to see if they impact the rule and if the QMSR needs an amendment. Any updates would go through the official rulemaking process.
When does the new 21 CFR Part 820 Quality System Regulation start?
The rule became effective and enforcement initiated on February 2, 2026.
Will the FDA review previously exempt records?
Yes. The FDA now inspects management reviews, quality audits, and supplier audit reports. The old exemptions under US FDA 21 CFR Part 820 specifically 820.180(c) no longer apply. Since manufacturers already give these files to global regulators, they must have them ready for FDA inspectors.