Quality Management System Regulation (QMSR) — 21 CFR Part 820
The Quality Management System Regulation (QMSR) is the current regulatory framework governing quality management system requirements for medical device manufacturers in the United States. Issued by the U.S. Food and Drug Administration, the QMSR replaces the former Quality System Regulation and harmonizes U.S. current good manufacturing practice requirements with ISO 13485:2016, the internationally recognized standard for medical device quality management systems.
The QMSR reflects FDA’s determination that the requirements of ISO 13485:2016 provide a level of assurance for device safety, effectiveness, and quality that is consistent with the statutory requirements of the Federal Food, Drug, and Cosmetic Act. This harmonization aligns U.S. regulatory expectations more closely with those applied by regulatory authorities worldwide while preserving FDA’s inspection and enforcement authority.
Regulatory Scope and Applicability
The QMSR applies to manufacturers of finished medical devices subject to FDA regulation. The rule incorporates ISO 13485:2016 by reference, with specific FDA clarifications and retained provisions to ensure alignment with U.S. statutory requirements. Manufacturers are expected to maintain a quality management system that conforms to ISO 13485 principles while satisfying all applicable FDA expectations under 21 CFR Part 820.
Terminology and Structural Changes
Under the QMSR, ISO 13485 terminology replaces many legacy QSR-specific terms. Concepts such as quality manuals, documented procedures, and risk-based controls are now central to regulatory compliance. While the terminology has shifted, FDA expectations for control, traceability, and documented evidence remain unchanged in substance.
Manufacturers transitioning from the former QSR are expected to demonstrate that their quality systems reflect ISO 13485 structure and intent, rather than relying solely on legacy QSR documentation formats.
Inspection and Oversight Expectations
FDA inspections under the QMSR assess conformity to ISO 13485-based quality management system requirements as incorporated into Part 820. Unlike the former QSR, management reviews and quality audit reports are no longer exempt from FDA inspection. Inspectors may review these records to evaluate the effectiveness of the quality system, management oversight, and continuous improvement processes.
FDA retains full authority to conduct inspections, issue regulatory observations, and take enforcement actions where deficiencies are identified.
Relationship to ISO 13485 Certification and MDSAP
ISO 13485 certification alone is not accepted as a substitute for FDA inspection. While FDA may accept Medical Device Single Audit Program (MDSAP) audit reports in lieu of routine inspections in certain circumstances, manufacturers remain fully subject to FDA oversight and enforcement under the QMSR.
Participation in MDSAP and maintenance of ISO 13485 certification may support inspection readiness but do not eliminate FDA regulatory obligations.
Practical Implementation Considerations
Manufacturers are expected to have fully implemented QMSR-compliant quality management systems. Organizations without prior ISO 13485 experience may encounter challenges related to documentation structure, risk management integration, and management responsibility requirements. These challenges do not alter FDA expectations for compliance.
Successful implementation depends on disciplined quality system design, conservative interpretation of regulatory requirements, and demonstrable operational control.
Regulatory Perspective
The QMSR represents a structural alignment of U.S. medical device quality regulation with international standards, not a reduction in regulatory rigor. FDA continues to expect manufacturers to demonstrate effective control over design, production, validation, change management, and post-market activities.
Manufacturers operating in the U.S. market are expected to maintain QMSR-compliant systems as a condition of ongoing regulatory compliance.
Bottom Line
The Quality Management System Regulation is now the established regulatory baseline for U.S. medical device manufacturers. Organizations that treat ISO 13485 alignment as optional or interpret harmonization as reduced oversight risk significant compliance exposure during FDA inspection.