--- title: "Change Control, Definition | MedTech Terms" description: "Formal QMS process for evaluating, approving, and implementing changes that could affect product quality or compliance." lang: en json-ld: | { "@context": "https://schema.org", "@graph": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/change-control#term", "name": "Change Control", "description": "Change control evaluates proposed changes to design, processes, suppliers, software, or labeling for impact on safety, performance, regulatory status, and validation status before approval and implementation.", "url": "https://medtechterms.com/terms/change-control", "termCode": "change-control", "inDefinedTermSet": { "@type": "DefinedTermSet", "name": "MedTech Terms", "url": "https://medtechterms.com/terms" } }, { "@type": "Article", "@id": "https://medtechterms.com/terms/change-control#article", "headline": "Change Control", "description": "Formal QMS process for evaluating, approving, and implementing changes that could affect product quality or compliance.", "url": "https://medtechterms.com/terms/change-control", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://medtechterms.com/terms/change-control" }, "about": { "@id": "https://medtechterms.com/terms/change-control#term" }, "articleSection": "Quality & Risk", "inLanguage": "en", "keywords": "Change Control, Quality & Risk, medical device, MedTech", "author": { "@type": "Person", "name": "Christian Espinosa", "jobTitle": "Founder, Blue Goat Cyber", "url": "https://bluegoatcyber.com" }, "publisher": { "@type": "Organization", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "isPartOf": { "@type": "WebSite", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "datePublished": "2026-05-05", "dateModified": "2026-05-05", "citation": [ { "@type": "CreativeWork", "name": "21 CFR 820.30(i)", "url": "https://www.ecfr.gov/current/title-21/chapter-I/subchapter-H/part-820", "publisher": { "@type": "Organization", "name": "eCFR" } }, { "@type": "CreativeWork", "name": "FDA - Quality Systems", "url": "https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-system-qs-regulationmedical-device-good-manufacturing-practices", "publisher": { "@type": "Organization", "name": "FDA" } }, { "@type": "CreativeWork", "name": "ISO 13485 Standard Page", "url": "https://www.iso.org/iso-13485-medical-devices.html", "publisher": { "@type": "Organization", "name": "ISO" } } ], "mentions": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/letter-to-file#term", "name": "Letter to File", "alternateName": "LTF", "url": "https://medtechterms.com/terms/letter-to-file" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/design-controls#term", "name": "Design Controls", "url": "https://medtechterms.com/terms/design-controls" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/supplier-controls#term", "name": "Supplier Controls", "url": "https://medtechterms.com/terms/supplier-controls" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/ai-ml-pccp#term", "name": "Predetermined Change Control Plan", "alternateName": "PCCP", "url": "https://medtechterms.com/terms/ai-ml-pccp" } ] }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://medtechterms.com/" }, { "@type": "ListItem", "position": 2, "name": "Terms", "item": "https://medtechterms.com/terms" }, { "@type": "ListItem", "position": 3, "name": "Quality & Risk", "item": "https://medtechterms.com/terms?cat=Quality%20%26%20Risk" }, { "@type": "ListItem", "position": 4, "name": "Change Control", "item": "https://medtechterms.com/terms/change-control" } ] }, { "@type": "FAQPage", "@id": "https://medtechterms.com/terms/change-control#faq", "mainEntity": [ { "@type": "Question", "name": "What is the primary goal of change control in MedTech?", "acceptedAnswer": { "@type": "Answer", "text": "The primary goal is to ensure that any modification to a medical device, its manufacturing process, or quality system documentation maintains or improves the safety, performance, and regulatory compliance of the device." } }, { "@type": "Question", "name": "How does change control relate to risk management?", "acceptedAnswer": { "@type": "Answer", "text": "Change control is intrinsically linked to risk management, as every proposed change should undergo a risk assessment per ISO 14971:2019 to identify, evaluate, and mitigate any new or increased risks associated with the change." } }, { "@type": "Question", "name": "When is a change control process initiated?", "acceptedAnswer": { "@type": "Answer", "text": "A change control process is initiated whenever there is a proposed alteration to an approved design, process, software, labeling, or supplier that could impact the medical device's form, fit, function, safety, performance, or regulatory status." } }, { "@type": "Question", "name": "What kind of changes typically require change control?", "acceptedAnswer": { "@type": "Answer", "text": "Changes requiring control include modifications to device specifications, manufacturing equipment, software algorithms, packaging, sterilization methods, critical suppliers, and labeling content, among others." } } ] } ] } --- [ MedTech Terms The authoritative reference ](/) Browse Learn [Latest](/latest) About 1. [Home](/) 2. / 3. [Terms](/terms) 4. / 5. [Quality & Risk](/terms?cat=Quality%20%26%20Risk) 6. / 7. Change Control [All terms](/terms) Quality & Risk [Quality System](/ecosystems/quality-system) # Change Control Formal QMS process for evaluating, approving, and implementing changes that could affect product quality or compliance. Reviewed by [Christian Espinosa, Founder, Blue Goat Cyber](/authors/christian-espinosa) Last reviewed May 5, 2026 ## Definition Change control evaluates proposed changes to design, processes, suppliers, software, or [labeling](/terms/labeling) for impact on safety, performance, regulatory status, and validation status before approval and implementation. What the regulation says Change control is a fundamental element of a quality management system, as outlined in FDA 21 CFR Part 820.30(i) for design changes and throughout [ISO 13485](/terms/iso-13485):2016, specifically clause 4.2.4 for control of documents and clause 7.3.9 for design and development changes. It ensures that modifications to a medical device or its associated processes do not adversely affect safety, effectiveness, or compliance with applicable regulations, such as those detailed in EU [MDR](/terms/mdr-reporting) 2017/745 Annex I. ## What this means in practice Tightly linked to Letter-to-File decisions, supplier change notifications, and [PCCP](/terms/ai-ml-pccp) boundaries for AI devices. Inadequate change-impact assessments are a frequent FDA inspection finding. ## Examples - A MedTech company initiates a change control to update the software algorithm of an infusion pump to improve dose accuracy, requiring re-validation and regulatory submission. - A manufacturer of surgical instruments implements a change control to approve a new supplier for a critical component, necessitating supplier qualification and impact assessment on existing device validations. - A diagnostic device firm uses change control to revise its labeling to include updated warnings based on post-market surveillance data, ensuring compliance with EU MDR Annex I, Section 23.4. (Warnings and precautions). Common pitfalls - • Failing to document the rationale for not performing a full re-validation after a minor design change is a common pitfall. - • Implementing a software update without assessing its impact on cybersecurity and existing clinical claims can lead to significant issues. - • Not involving all relevant functional areas, such as regulatory affairs or cybersecurity, in the change assessment process is a frequent mistake. - • Overlooking the cumulative effect of multiple small changes on device performance or regulatory compliance can result in non-conformities. - • Skipping a formal risk assessment for proposed changes, as required by ISO 14971:2019, clause 6.2, is a critical error. ## Frequently asked questions What is the primary goal of change control in MedTech? The primary goal is to ensure that any modification to a medical device, its manufacturing process, or quality system documentation maintains or improves the safety, performance, and regulatory compliance of the device. How does change control relate to risk management? When is a change control process initiated? What kind of changes typically require change control? ## Cross-references ### Uses Concepts or artefacts this term builds on. - [ Letter to File(LTF) ](/terms/letter-to-file) ### See also Closely related context worth reading. - [ Predetermined Change Control Plan(PCCP) ](/terms/ai-ml-pccp) ## Related terms Grouped by theme ### Editor's picks · Hand-selected related concepts [ Manufacturing Supplier Controls Procedures to ensure purchased products and services conform to requirements. ](/terms/supplier-controls)[ Quality & Risk Design Controls Structured process governing the design of medical devices. ](/terms/design-controls)[ Regulatory Letter to File(LTF) Internal documentation justifying that a device change does not require a new 510(k) submission. ](/terms/letter-to-file)[ Software & AI Predetermined Change Control Plan(PCCP) FDA mechanism to pre-authorize specific modifications to AI/ML-enabled devices. ](/terms/ai-ml-pccp) ### Manufacturing & Supply Chain · From this learning path [ Quality & Risk Biocompatibility Ability of a material to perform with an appropriate host response in a specific application. ](/terms/biocompatibility?from=manufacturing-and-supply-chain)[ Manufacturing Design Transfer Translating design into production specifications. Adjacent lesson ](/terms/design-transfer?from=manufacturing-and-supply-chain)[ Quality & Risk IQ / OQ / PQ Installation, Operational, and Performance Qualification - the three stages of equipment and process qualification. ](/terms/iq-oq-pq?from=manufacturing-and-supply-chain)[ Quality & Risk Nonconformance (NCR)(NCR) Failure of a product, process, or system to meet specified requirements. ](/terms/nonconformance?from=manufacturing-and-supply-chain) Cited by Where this term appears across MedTech Terms. Learning paths (1) - [Manufacturing & Supply Chain](/paths/manufacturing-and-supply-chain)Lesson 11 of 14 Ecosystems (1) - [Quality System](/ecosystems/quality-system) ## Primary references 3 sources Link health: 3 verified · last checked 2026-06-20 eCFR· 1 FDA· 1 ISO· 1 1. [1 21 CFR 820.30(i) Verified eCFR · ecfr.gov ](https://www.ecfr.gov/current/title-21/chapter-I/subchapter-H/part-820) 2. [2 FDA - Quality Systems Verified FDA · fda.gov ](https://www.fda.gov/medical-devices/postmarket-requirements-devices/quality-system-qs-regulationmedical-device-good-manufacturing-practices) 3. [3 ISO 13485 Standard Page Verified ISO · iso.org ](https://www.iso.org/iso-13485-medical-devices.html) Inline markers like \[1\] jump to the matching reference above. Sponsor note ### Tying cybersecurity into your QMS? We help align cybersecurity activities with ISO 13485 design controls and ISO 14971 risk management. [Book a 30-minute discovery session](https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session) - No obligation - Expert-led from minute one - NDA available on request MedTech Terms is a community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com). Definitions are independent of any vendor. On this term Category Quality & Risk Sources 3 Updated 5/5/2026 [Compare with another term](/compare?a=change-control) Learn in 60 seconds Card Lesson Quiz Formal QMS process for evaluating, approving, and implementing changes that could affect product quality or compliance. - · Tightly linked to Letter-to-File decisions, supplier change notifications, and PCCP boundaries for AI devices. - · Inadequate change-impact assessments are a frequent FDA inspection finding. Remember this Watch out: Failing to document the rationale for not performing a full re-validation after a minor design change is a common pitfall. Related terms - [Letter to File(LTF) ](/terms/letter-to-file) - [Design Controls ](/terms/design-controls) - [Supplier Controls ](/terms/supplier-controls) - [Predetermined Change Control Plan(PCCP) ](/terms/ai-ml-pccp) You may also need Auto-suggested from Quality & Risk and shared keywords. - [Real-Time PMA Supplement Review ](/terms/pma-real-time-review) - [Production and Process Controls ](/terms/production-process-controls) - [Process FMEA vs Design FMEA(PFMEA / DFMEA) ](/terms/pfmea-vs-dfmea) - [Algorithm Change Protocol(ACP) ](/terms/algorithm-change-protocol) - [Engineering Change Order / Notice(ECO / ECN) ](/terms/eco-ecn) - [PMA Supplement Types ](/terms/pma-supplement-types) [All Quality & Risk terms](/terms?cat=Quality%20%26%20Risk) From the Blue Goat network Related resources and services on this topic. - [ MedTech Truths Common misconceptions about medical device development - debunked. ](https://mdcmisconceptions.com) MedTech Terms An authoritative, plain-language reference for the regulatory, quality, cybersecurity, and software terms that shape modern medical devices. Browse - [All terms](/terms) - [A–Z index](/a-z) - [Categories](/categories) - [Ecosystems](/ecosystems) - [Learning paths](/paths) - [Compare terms](/compare) - [Quiz](/quiz) Resources - [FDA Medical Devices](https://www.fda.gov/medical-devices) - [EU MDR](https://eur-lex.europa.eu/eli/reg/2017/745/oj) - [IMDRF](https://www.imdrf.org/) - [Methodology](/methodology) - [Changelog](/changelog) - [Editor: Christian Espinosa](/authors/christian-espinosa) - [About this site](/about) © 2026 MedTech Terms. Reference content for educational purposes - not regulatory advice. A community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com)