Top Questions Regarding the 21 CFR 820 FAQs for Medical Devices
FDA 21 CFR Part 820 establishes quality management system requirements for applicable medical device manufacturers in the United States. Since February 2, 2026, Part 820 operates as the Quality Management System Regulation (QMSR) and incorporates ISO 13485:2016 by reference.
For medical device manufacturers, understanding FDA 21 CFR Part 820 is essential for developing, implementing, and maintaining a quality management system that supports product safety, effectiveness, and regulatory compliance.
Need Expert Support With FDA 21 CFR Part 820?
What Is FDA 21 CFR Part 820?
FDA 21 CFR Part 820 is the U.S. regulation governing quality management systems for manufacturers of finished medical devices intended for commercial distribution. The current QMSR incorporates ISO 13485:2016 while retaining additional FDA-specific requirements.
The regulation covers quality management activities such as:
- Quality management system controls
- Management responsibility
- Risk management
- Design and development
- Supplier and purchasing controls
- Production and process controls
- Documentation and records
- Complaint handling
- Corrective and preventive actions
- Monitoring and measurement
Manufacturers must establish and maintain processes appropriate to their products, operations, and applicable regulatory requirements.
When Did FDA 21 CFR Part 820 Become QMSR?
The FDA published the final QMSR rule in February 2024, and the regulation became effective on February 2, 2026. The major change is the incorporation of ISO 13485:2016 by reference into 21 CFR Part 820. This creates greater alignment between the U.S. quality system framework and the internationally recognized ISO 13485 standard.
However, QMSR does not mean that manufacturers can simply obtain ISO 13485 certification and consider their FDA obligations complete. FDA requirements that apply specifically to the U.S. market must still be addressed.
How Does FDA 21 CFR Part 820 Relate to ISO 13485?
The current QMSR uses ISO 13485:2016 as its foundational quality management system framework. Manufacturers should therefore understand both ISO 13485 requirements and the additional FDA requirements applicable to their operations.
An ISO 13485 certificate does not automatically demonstrate full compliance with FDA requirements. FDA conducts its own regulatory inspections and evaluates whether the manufacturer’s quality management system meets applicable U.S. requirements. This distinction is particularly important for companies that already operate an ISO 13485-certified QMS and are expanding into the U.S. market.
What Are the Key Requirements of FDA 21 CFR Part 820?
1. Quality Management System
Manufacturers need a documented and effectively implemented quality management system covering processes that can affect the quality of medical devices. The QMS should define responsibilities, procedures, controls, records, and monitoring activities.
2. Management Responsibility
Management must provide appropriate resources and ensure that quality objectives and responsibilities are established. Management review is also an important part of evaluating QMS performance and identifying areas that require improvement.
3. Risk Management
Risk management should be integrated into relevant quality processes. Manufacturers should identify, evaluate, control, and monitor risks associated with their devices and processes. Risk information should also connect with activities such as design, production, supplier management, complaints, and post-market activities.
4. Design and Development Controls
Design and development processes should be controlled to ensure that medical devices meet defined requirements and intended use.
Relevant activities can include:
- Design planning
- Design inputs and outputs
- Design reviews
- Verification and validation
- Design transfer
- Design changes
- Design and development records
Effective design controls help manufacturers demonstrate that the device was developed systematically and according to established requirements.
5. Purchasing and Supplier Controls
Manufacturers must control suppliers and purchased products or services that can affect product quality. Supplier evaluation, selection, monitoring, and re-evaluation should be based on the supplier’s ability to meet specified requirements.
6. Production and Process Controls
Manufacturing processes should be controlled to consistently produce devices that meet established specifications. Where process results cannot be fully verified through subsequent inspection or testing, appropriate process validation should be performed and documented.
7. Documentation and Records
Document and record controls are fundamental to an effective QMS. Manufacturers should maintain appropriate procedures for creating, reviewing, approving, updating, distributing, and retaining quality documents and records. FDA may review relevant QMS records during inspections, including management review, quality audit, and supplier audit records.
8. Complaint and Corrective Action Processes
Manufacturers need effective processes for receiving and evaluating complaints and determining when corrective action is necessary. Complaint information can provide important input for risk management, CAPA, product improvements, and post-market activities.
Get FDA 21 CFR Part 820 Support
Talk to our regulatory experts for practical QMSR implementation and inspection-readiness support.
What Changed From the Old QSR to the QMSR?
The most significant change is that ISO 13485:2016 is now incorporated by reference into 21 CFR Part 820. Another important change is the FDA inspection approach. The previous Quality System Inspection Technique (QSIT) is no longer used as the inspection framework following the QMSR’s effective date.
Manufacturers should therefore update their QMS assessment and inspection-readiness activities based on the current QMSR framework rather than relying only on older QSR or QSIT-based guidance.
Does ISO 13485 Certification Guarantee FDA Compliance?
No.
ISO 13485 certification does not automatically mean that a manufacturer meets every applicable FDA requirement. Companies selling medical devices in the United States should evaluate their QMS against the complete set of applicable FDA requirements and ensure that their documented procedures are actually implemented in practice.
How Can Manufacturers Prepare for FDA 21 CFR Part 820?
A practical QMSR readiness assessment can include:
- Reviewing the existing quality management system
- Mapping procedures against ISO 13485:2016
- Identifying applicable FDA-specific requirements
- Reviewing design and development controls
- Assessing risk management processes
- Evaluating supplier and purchasing controls
- Reviewing production and process validation
- Assessing complaint and CAPA processes
- Reviewing quality records and documentation
- Conducting internal audits and addressing identified gaps
The objective should not simply be to create additional documentation. Manufacturers should ensure that their QMS is documented, implemented, monitored, and supported by objective evidence.
How Can Operon Strategist Help With FDA 21 CFR Part 820?
Operon Strategist helps medical device manufacturers assess, implement, and improve quality management systems aligned with FDA 21 CFR Part 820, QMSR, and ISO 13485:2016. Our experts can support QMS gap assessments, documentation, design and development controls, risk management, supplier controls, process validation, CAPA, complaint handling, internal audits, employee training, and FDA inspection readiness.
By evaluating your existing processes against applicable FDA and international requirements, Operon Strategist helps identify gaps, strengthen QMS processes, and prepare your organization for U.S. medical device market requirements.
Need Expert Support With FDA 21 CFR Part 820?
Get professional QMSR and ISO 13485 support from Operon Strategist.
FAQ's
Is FDA 21 CFR Part 820 still applicable?
Yes. Part 820 remains the regulatory framework for the FDA’s Quality Management System Regulation. The revised QMSR became effective on February 2, 2026.
Is QMSR the same as ISO 13485?
No. QMSR incorporates ISO 13485:2016 by reference, but applicable FDA-specific requirements must also be addressed.
Does an ISO 13485 certificate replace an FDA inspection?
No. FDA may conduct its own inspection even when a manufacturer holds an ISO 13485 certificate.
Does FDA still use QSIT?
No. FDA discontinued the previous QSIT inspection approach when the QMSR became effective.
Who should follow FDA 21 CFR Part 820?
The QMSR generally applies to manufacturers of finished medical devices intended for commercial distribution, subject to applicable regulatory provisions and exemptions.