FDA 21 CFR Part 820 (QMSR) is the US Food and Drug Administration’s Quality Management System Regulation for medical devices. Effective February 2, 2026, it replaces the former Quality System Regulation and incorporates ISO 13485:2016 by reference, setting current good manufacturing practice requirements for finished device manufacturers.
What is FDA 21 CFR Part 820 (QMSR)?
Part 820 sits in Title 21 of the US Code of Federal Regulations and defines the quality system obligations a manufacturer must meet to legally market a finished device in the United States. The 2024 final rule renamed it from the Quality System Regulation (QSR) to the Quality Management System Regulation (QMSR) and rewrote most of its text as a pointer to ISO 13485:2016, the international quality management standard for medical devices.
Rather than spelling out each requirement, the updated Part 820 references the relevant ISO 13485 clause and adds a small set of FDA-specific provisions on top. The definitions section also pulls from ISO 9000:2015, while retaining statutory terms such as “device” and “finished device” from the Federal Food, Drug, and Cosmetic Act.
Why FDA 21 CFR Part 820 (QMSR) matters in medical device development
For any company selling devices in the US, the QMSR is the legal baseline for how you design, produce, label, and service products. Falling short exposes you to FDA Form 483 observations, warning letters, import holds, and, in serious cases, consent decrees or recalls, each of which carries direct patient-safety and commercial consequences.
The shift also changes what inspectors can see. Under the old QSR, management reviews, internal audit results, and supplier audit reports were shielded from routine FDA review. The QMSR removes that exception, so those records are now open during inspection. Teams that treated audits as private self-assessments need to rework how they document findings.
For manufacturers already certified to ISO 13485, the practical gap is narrow. For companies that built their system around the old QSR text alone, the transition means real work: mapping procedures to ISO clauses, closing gaps, and retraining staff before an inspection lands.
Key components of FDA 21 CFR Part 820 (QMSR)
The regulation is now short because most requirements live inside the referenced standard. The pieces that matter most:
- Incorporation by reference (820.7). ISO 13485:2016 and parts of ISO 9000:2015 are pulled into Part 820 as enforceable text.
- Scope (820.1) and definitions (820.3). These set applicability and reconcile ISO vocabulary with FDA statutory terms, adding definitions such as “component” that neither standard supplies.
- QMS requirements (820.10). This links the ISO-based system to other FDA rules: medical device reporting (21 CFR Part 803), unique device identification (Part 830), corrections and removals, and device tracking.
- Control of records (820.35). Adds explicit content rules for complaint and service records, including when a complaint must be investigated, plus UDI and confidentiality provisions.
- Device labeling and packaging controls (820.45). FDA judged ISO 13485 thin here, so it kept a requirement to inspect label accuracy before release.
Sections FDA considered already covered by ISO 13485 are marked “Reserved,” meaning they simply direct the reader to the standard. FDA also made conforming edits to Part 4 for combination products.
Common challenges and best practices
A frequent mistake is assuming that an ISO 13485 certificate equals QMSR compliance. It does not. The certificate covers most of the framework, but the FDA-specific additions in 820.10, 820.35, and 820.45, along with the statutory definitions, still need to be addressed in your procedures.
Another gap shows up in records that used to be private. Because management review, internal audits, and supplier audits are now inspectable, findings should be written to withstand outside scrutiny while still being honest and useful. Vague corrective actions or open items with no closure date are easy targets.
Good practice starts with a documented gap assessment against ISO 13485:2016 and the QMSR text, prioritized around design controls, complaint handling, and recordkeeping. From there, update SOPs and work instructions to reference the correct ISO clauses, retrain quality and engineering staff, and run a mock inspection under the new compliance program (CP 7382.850) that replaced the retired Quality System Inspection Technique. Manufacturers in the Medical Device Single Audit Program stay exempt from routine FDA inspection, which is worth factoring into audit strategy.
How SJML helps with FDA 21 CFR Part 820 (QMSR)
Syrma Johari MedTech (SJML) runs QMSR readiness as part of its Compliance-as-a-Service practice. Teams support gap assessments against ISO 13485:2016 and the revised Part 820, remediate design history files and quality procedures, and align QMS documentation with FDA, EU MDR/IVDR, and MDSAP expectations under one roof. Support extends to risk management files (ISO 14971), supplier qualification and audits, labeling and packaging controls, and inspection readiness. For OEMs moving from the legacy QSR or scaling a new system, this shortens the path to an inspection-ready quality system.
Frequently asked questions
The QMSR became effective on February 2, 2026. On that date, the FDA retired the Quality System Inspection Technique and began inspecting under compliance program 7382.850. Manufacturers were expected to have their quality systems aligned with the revised Part 820 and ISO 13485:2016 by that date, since the two-year transition period ran from the final rule’s 2024 publication.
No. The QMSR incorporates ISO 13485:2016 by reference, so the standard forms the core of the regulation, but the FDA added supplemental requirements that the standard does not cover. These include specific record and complaint rules in 820.35, labeling and packaging controls in 820.45, statutory definitions, and links to reporting, UDI, and device tracking obligations. Certification alone does not prove full QMSR compliance.
No. An ISO 13485 certificate does not replace an FDA inspection, and the agency does not accept certification as a substitute for its own review. Certification can build inspector confidence and reduce transition work, but only participation in the Medical Device Single Audit Program (MDSAP) exempts a manufacturer from routine FDA inspection.
The QMSR removes the old exemption that kept management review, internal audit, and supplier audit reports out of routine FDA inspections. Those records are now open to investigators. Manufacturers should keep review agendas, audit findings, and corrective actions complete, defensible, and closed on schedule, since inspectors can request them directly.
Related terms
- ISO 13485
- Design Controls
- CAPA (Corrective and Preventive Action)
- Design History File (DHF)
- MDSAP (Medical Device Single Audit Program)
