21 CFR Part 820
Quality System Regulation (QMSR)
Legal Requirement: This regulation is legally binding and must be complied with for US market access. Non-compliance can result in regulatory action, including warning letters, import detentions, and product recalls.
Overview
Scope
21 CFR Part 820 establishes quality system requirements for medical device manufacturers. The Quality System Regulation (QMSR) is now aligned with ISO 13485:2016, creating harmonized requirements for quality management systems. Part 820 covers all aspects of device design, development, production, and distribution.
Applicability
Part 820 applies to all medical device manufacturers, including those that design, manufacture, prepare, process, assemble, or package medical devices. It applies to finished device manufacturers, contract manufacturers, and specification developers. The regulation covers devices intended for human use and veterinary devices.
Why It Matters
21 CFR Part 820 is the foundation of FDA quality system requirements for medical devices. Compliance is mandatory for US market access. The 2024 update aligning with ISO 13485:2016 creates harmonized requirements, allowing manufacturers to use a single QMS for both FDA and international markets. Non-compliance can result in FDA inspections, warning letters, import detentions, and product recalls.
Key Concepts
- Quality management system requirements
- Design controls and design history file (DHF)
- Corrective and preventive action (CAPA)
- Management responsibility and resource management
- Production and process controls
- Purchasing controls and supplier management
- Document and record control
- Nonconforming product control
- Quality audits and management review
FDA's QMSR alignment with ISO 13485 simplifies global compliance for manufacturers.
Part 820 is FDA's Quality System Regulation—and with QMSR, it now references ISO 13485:2016 directly. This is a huge harmonization win. If you're building a QMS from scratch, build to ISO 13485. You'll meet FDA requirements and international requirements with one system.
🔑 Key Takeaways
- →QMSR is now in effect—align your QMS with ISO 13485:2016.
- →Design controls and CAPA remain FDA's highest inspection focus areas.
- →Document your processes—not just what to do, but how to prove you did it.
- →FDA inspections focus on trending and pattern analysis. Track your data.
— ER | medev.ai
Building better devices, together.
Key Requirements Overview
Quality Management System (820.5)
Manufacturers must establish and maintain a quality management system appropriate for the device. The QMS must include quality policy, quality objectives, quality planning, and documented procedures. The system must be effective and continuously improved.
Management Responsibility (820.20)
Management must establish quality policy and objectives, ensure adequate resources, appoint management representative, and conduct management reviews. Management must ensure customer and regulatory requirements are understood and met.
Design Controls (820.30)
Manufacturers must establish and maintain procedures for design and development. Design controls include design planning, design inputs, design outputs, design review, design verification, design validation, design transfer, design changes, and design history file (DHF).
Document Control (820.40)
Manufacturers must establish procedures for document approval, distribution, and changes. Documents must be reviewed and approved before use. Changes must be reviewed and approved. Obsolete documents must be removed or identified.
Purchasing Controls (820.50)
Manufacturers must establish procedures for evaluating and selecting suppliers. Purchasing documents must specify requirements. Incoming products must be verified. Supplier performance must be evaluated.
Production and Process Controls (820.70)
Manufacturers must establish procedures for production and process controls including work instructions, process validation, equipment calibration, environmental controls, and personnel qualification.
Corrective and Preventive Action (CAPA) (820.100)
Manufacturers must establish procedures for investigating nonconformities, identifying root causes, implementing corrections, and preventing recurrence. CAPA effectiveness must be verified.
Nonconforming Product (820.90)
Manufacturers must establish procedures for identifying, documenting, evaluating, segregating, and disposing of nonconforming product. Nonconforming product must be prevented from unintended use.
Compliance Roadmap
Gap Analysis
Conduct gap analysis comparing current quality system to Part 820 requirements (aligned with ISO 13485:2016). Identify areas needing improvement and create implementation plan with timelines and responsibilities.
Establish Quality Policy and Objectives
Develop quality policy reflecting commitment to quality and regulatory compliance. Set measurable quality objectives aligned with policy. Communicate policy and objectives throughout organization.
Document Control System
Implement document control system ensuring all QMS documents are approved, reviewed, updated, and available where needed. Use version control and change history. Consider electronic document management systems.
Design Controls
Establish design and development procedures covering planning, inputs, outputs, review, verification, validation, and transfer. Create design history files (DHF) for each device. Link design controls to risk management.
Supplier Management
Develop supplier evaluation and selection criteria. Establish purchasing controls including supplier qualification, purchase order review, and incoming inspection. Maintain approved supplier lists and performance records.
Production Controls
Implement production controls including work instructions, process validation, equipment calibration, and environmental controls. Establish traceability systems. Control nonconforming product.
CAPA System
Implement corrective and preventive action procedures. Establish processes for investigating nonconformities, identifying root causes, implementing corrections, and preventing recurrence. Track CAPA effectiveness.
Internal Audits and Management Review
Conduct regular internal audits of the QMS. Schedule management reviews to evaluate QMS effectiveness, review quality objectives, and identify improvement opportunities. Document all findings and actions.
Common Challenges & Solutions
Transitioning to ISO 13485:2016 alignment
Review FDA guidance on QMSR transition. Update QMS procedures to align with ISO 13485:2016 while maintaining FDA-specific requirements. Train staff on changes. Update documentation systematically.
Implementing design controls
Start with design planning and design inputs. Establish design review process. Link design controls to risk management. Create design history files. Consider using design control templates and tools.
Managing supplier quality
Develop supplier evaluation criteria and processes. Establish supplier qualification requirements. Implement incoming inspection and supplier performance monitoring. Maintain supplier records.
Related Regulations
Related Standards
Resources
Implementation Tools
Legal Notice: This page provides implementation guidance and educational content only. The actual regulation text is the legally binding document. Always refer to the official regulation published in the Code of Federal Regulations (CFR) and FDA guidance documents for compliance purposes.