Quality Management System Regulation, 21 CFR Part 820
The QMSR amends FDA's device current good manufacturing practice requirements in 21 CFR Part 820 and incorporates ISO 13485:2016 by reference, while retaining FDA-specific statutory and regulatory requirements. FDA began using a new device inspection process when the rule became effective.
What the authority record establishes
The QMSR amends FDA's device current good manufacturing practice requirements in 21 CFR Part 820 and incorporates ISO 13485:2016 by reference, while retaining FDA-specific statutory and regulatory requirements. FDA began using a new device inspection process when the rule became effective.
Binding for finished medical-device manufacturers within scope; incorporates ISO 13485:2016 and ISO 9000:2015 Clause 3 by reference with FDA-specific provisions
The exact official title, issuing body, jurisdiction, version or application record, and linked source define the scope of this page. Readers should not transfer the authority's status to a commercial product or infer transaction-, patient-, system-, site-, or organization-specific applicability from this summary.
Why it matters to this market
QMSR changes the inspection and record context in which U.S. device manufacturers operate. Buyers need systems that can preserve the organization's controlled processes and evidence; no vendor can make the organization compliant by configuration alone.
Affected operating stages
- Quality-System Governance
- Design And Development
- Supplier Control
- Production And Process Control
- Complaint And Post-Market Handling
- CAPA And Improvement
- Audit And Inspection
Capabilities to examine
Controlled Documents
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for controlled documents.
Training Management
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for training management.
Quality Events And Deviations
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for quality events and deviations.
CAPA
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for CAPA.
Change Control
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for change control.
Audit And Inspection Management
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for audit and inspection management.
Supplier Quality
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for supplier quality.
Complaints And Post-Market Quality
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for complaints and post-market quality.
Quality Risk Management
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for quality risk management.
Design Controls And Product Traceability
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for design controls and product traceability.
Computerized-System Validation Support
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for computerized-system validation support.
Analytics And Management Review
Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for analytics and management review.
Affected buyer audiences
- medical-device and IVD manufacturers
- combination-product organizations with device quality obligations
- quality-system and regulatory leaders
- supplier-quality and internal-audit teams
- computerized-system assurance teams
Implementation questions
- Which entities, products, populations, transactions, systems, sites, or jurisdictions are actually within scope?
- What is binding, what is guidance, and what is a technical or consensus standard?
- Which publication, adoption, effective, application, transition, and enforcement dates differ?
- Who owns legal, clinical, quality, regulatory, policy, or operational interpretation?
- How will a source revision affect open work and historical decisions?
Interpretation boundary
The FDA page and rule establish applicable requirements and inspection changes. They do not certify any commercial eQMS, dictate a single software architecture, or eliminate the manufacturer's duty to define, operate, and demonstrate an effective quality system.