21 CFR Part 820
Quality System Regulation (QMSR)
Legal Requirement: This regulation is legally binding and must be complied with for US market access. Non-compliance can result in regulatory action, including warning letters, import detentions, and product recalls.
Overview
Scope
21 CFR Part 820 establishes quality system requirements for medical device manufacturers. The Quality Management System Regulation (QMSR) incorporates ISO 13485:2016 by reference, creating harmonized global requirements with FDA-specific statutory additions. Part 820 is actively enforced, establishing unified expectations for device design, development, production, and distribution.
Applicability
Part 820 applies to all medical device manufacturers, including finished device manufacturers, contract manufacturers, and specification developers. It covers devices intended for human use and veterinary devices.
Why It Matters
With QMSR now fully in effect as of February 2, 2026, FDA quality inspections have transitioned from the legacy QSIT (Quality System Inspection Technique) framework to an audit approach evaluating ISO 13485:2016 conformance plus FDA supplemental requirements (e.g., complaint handling under 820.35, MDR under Part 803, and UDI under Part 830). Manufacturers can leverage a harmonized QMS globally, but must ensure FDA-specific definitions and reporting pathways are rigorously implemented.
Key Concepts
- QMSR active enforcement (incorporating ISO 13485:2016 by reference)
- Transition from legacy QSIT to modern QMSR inspection approach
- Design controls and design history file (DHF) under ISO 13485 Clause 7.3
- Risk management integration throughout the entire QMS (ISO 14971)
- FDA supplemental requirements (complaint handling, MDR, labeling, servicing)
- Corrective and preventive action (CAPA) and root cause analysis
- Management responsibility, quality audits, and resource management
- Production and process controls, validation, and traceability
- Purchasing controls and critical supplier oversight
FDA's QMSR alignment with ISO 13485 simplifies global compliance for manufacturers.
Part 820 is FDA's Quality System Regulation—and with QMSR, it now references ISO 13485:2016 directly. This is a huge harmonization win. If you're building a QMS from scratch, build to ISO 13485. You'll meet FDA requirements and international requirements with one system.
🔑 Key Takeaways
- →QMSR is now in effect—align your QMS with ISO 13485:2016.
- →Design controls and CAPA remain FDA's highest inspection focus areas.
- →Document your processes—not just what to do, but how to prove you did it.
- →FDA inspections focus on trending and pattern analysis. Track your data.
— ER | medev.ai
Building better devices, together.
Visual Guide
FDA 21 CFR 820 QMSR vs ISO 13485:2016
Effective February 2, 2026: Direct incorporation of ISO 13485:2016 by reference with FDA supplements
Incorporates requirements for Medical Device File (MDF), document control, and record retention directly satisfying traditional DHF/DMR rules.
Management commitment, quality policy, quality planning, management review, and executive resource allocation.
Design planning, inputs, outputs, review, verification, validation, design transfer, and change control. Replaces legacy § 820.30 directly.
Investigation of nonconformities, root cause identification, corrective actions, and statistical verification of effectiveness.
Design Controls Waterfall & V-Model Traceability
Aligned with ISO 13485:2016 Clause 7.3 & FDA 21 CFR 820.30 (QMSR)
“Did we build the product right?” Objective evidence (bench testing, code analysis, EMC test reports) that outputs satisfy inputs.
“Did we build the right product?” Simulated use testing, human factors evaluations, and clinical investigations in real operating conditions.
User Needs
Define intended use, patient population, clinical environment, and operational requirements.
Key Deliverables (DHF Artifacts)
- User Needs Document
- Intended Use Statement
- Clinical Evaluation Plan
- Human Factors User Profiles
Auditor / Reviewer Expectation
State requirements in the voice of the clinical user without prescribing technical solutions.
Key Requirements Overview
Quality Management System (820.5)
Manufacturers must establish and maintain a quality management system appropriate for the device. The QMS must include quality policy, quality objectives, quality planning, and documented procedures. The system must be effective and continuously improved.
Management Responsibility (820.20)
Management must establish quality policy and objectives, ensure adequate resources, appoint management representative, and conduct management reviews. Management must ensure customer and regulatory requirements are understood and met.
Design Controls (820.30)
Manufacturers must establish and maintain procedures for design and development. Design controls include design planning, design inputs, design outputs, design review, design verification, design validation, design transfer, design changes, and design history file (DHF).
Document Control (820.40)
Manufacturers must establish procedures for document approval, distribution, and changes. Documents must be reviewed and approved before use. Changes must be reviewed and approved. Obsolete documents must be removed or identified.
Purchasing Controls (820.50)
Manufacturers must establish procedures for evaluating and selecting suppliers. Purchasing documents must specify requirements. Incoming products must be verified. Supplier performance must be evaluated.
Production and Process Controls (820.70)
Manufacturers must establish procedures for production and process controls including work instructions, process validation, equipment calibration, environmental controls, and personnel qualification.
Corrective and Preventive Action (CAPA) (820.100)
Manufacturers must establish procedures for investigating nonconformities, identifying root causes, implementing corrections, and preventing recurrence. CAPA effectiveness must be verified.
Nonconforming Product (820.90)
Manufacturers must establish procedures for identifying, documenting, evaluating, segregating, and disposing of nonconforming product. Nonconforming product must be prevented from unintended use.
Compliance Roadmap
Gap Analysis
Conduct gap analysis comparing current quality system to Part 820 requirements (aligned with ISO 13485:2016). Identify areas needing improvement and create implementation plan with timelines and responsibilities.
Establish Quality Policy and Objectives
Develop quality policy reflecting commitment to quality and regulatory compliance. Set measurable quality objectives aligned with policy. Communicate policy and objectives throughout organization.
Document Control System
Implement document control system ensuring all QMS documents are approved, reviewed, updated, and available where needed. Use version control and change history. Consider electronic document management systems.
Design Controls
Establish design and development procedures covering planning, inputs, outputs, review, verification, validation, and transfer. Create design history files (DHF) for each device. Link design controls to risk management.
Supplier Management
Develop supplier evaluation and selection criteria. Establish purchasing controls including supplier qualification, purchase order review, and incoming inspection. Maintain approved supplier lists and performance records.
Production Controls
Implement production controls including work instructions, process validation, equipment calibration, and environmental controls. Establish traceability systems. Control nonconforming product.
CAPA System
Implement corrective and preventive action procedures. Establish processes for investigating nonconformities, identifying root causes, implementing corrections, and preventing recurrence. Track CAPA effectiveness.
Internal Audits and Management Review
Conduct regular internal audits of the QMS. Schedule management reviews to evaluate QMS effectiveness, review quality objectives, and identify improvement opportunities. Document all findings and actions.
Common Challenges & Solutions
Transitioning to ISO 13485:2016 alignment
Review FDA guidance on QMSR transition. Update QMS procedures to align with ISO 13485:2016 while maintaining FDA-specific requirements. Train staff on changes. Update documentation systematically.
Implementing design controls
Start with design planning and design inputs. Establish design review process. Link design controls to risk management. Create design history files. Consider using design control templates and tools.
Managing supplier quality
Develop supplier evaluation criteria and processes. Establish supplier qualification requirements. Implement incoming inspection and supplier performance monitoring. Maintain supplier records.
Connected Knowledge Graph (Local View)
Connected standards, regulations, and workflows for 21 CFR Part 820
Related Regulations
Related Standards
Resources
Implementation Tools
Legal Notice: This page provides implementation guidance and educational content only. The actual regulation text is the legally binding document. Always refer to the official regulation published in the Code of Federal Regulations (CFR) and FDA guidance documents for compliance purposes.