--- title: "Design Controls, Definition | MedTech Terms" description: "Structured process governing the design of medical devices. Plain-English Quality & Risk definition for MedTech teams, with examples and related terms." lang: en json-ld: | { "@context": "https://schema.org", "@graph": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/design-controls#term", "name": "Design Controls", "description": "Design controls (21 CFR 820.30) are an interrelated set of practices and procedures that are incorporated into the design and development process to manage design inputs, outputs, verification, validation, transfer, and changes.", "url": "https://medtechterms.com/terms/design-controls", "termCode": "design-controls", "inDefinedTermSet": { "@type": "DefinedTermSet", "name": "MedTech Terms", "url": "https://medtechterms.com/terms" } }, { "@type": "Article", "@id": "https://medtechterms.com/terms/design-controls#article", "headline": "Design Controls", "description": "Structured process governing the design of medical devices.", "url": "https://medtechterms.com/terms/design-controls", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://medtechterms.com/terms/design-controls" }, "about": { "@id": "https://medtechterms.com/terms/design-controls#term" }, "articleSection": "Quality & Risk", "inLanguage": "en", "keywords": "Design Controls, Quality & Risk, medical device, MedTech", "author": { "@type": "Person", "name": "Christian Espinosa", "jobTitle": "Founder, Blue Goat Cyber", "url": "https://bluegoatcyber.com" }, "publisher": { "@type": "Organization", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "isPartOf": { "@type": "WebSite", "name": "MedTech Terms", "url": "https://medtechterms.com" }, "datePublished": "2026-05-05", "dateModified": "2026-05-05", "citation": [ { "@type": "CreativeWork", "name": "21 CFR 820.30 Design Controls", "url": "https://www.ecfr.gov/current/title-21/chapter-I/subchapter-H/part-820/subpart-C/section-820.30", "publisher": { "@type": "Organization", "name": "eCFR" } }, { "@type": "CreativeWork", "name": "FDA Design Control Guidance for Medical Device Manufacturers", "url": "https://www.fda.gov/regulatory-information/search-fda-guidance-documents/design-control-guidance-medical-device-manufacturers", "publisher": { "@type": "Organization", "name": "FDA" } }, { "@type": "CreativeWork", "name": "ISO 13485 Standard Page", "url": "https://www.iso.org/iso-13485-medical-devices.html", "publisher": { "@type": "Organization", "name": "ISO" } } ], "mentions": [ { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/qsr#term", "name": "Quality System Regulation", "alternateName": "QSR / 21 CFR 820", "url": "https://medtechterms.com/terms/qsr" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/qmsr#term", "name": "Quality Management System Regulation", "alternateName": "QMSR", "url": "https://medtechterms.com/terms/qmsr" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/design-history-file#term", "name": "Design History File", "alternateName": "DHF", "url": "https://medtechterms.com/terms/design-history-file" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/verification-validation#term", "name": "Verification & Validation", "alternateName": "V&V", "url": "https://medtechterms.com/terms/verification-validation" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/iso-13485#term", "name": "ISO 13485", "url": "https://medtechterms.com/terms/iso-13485" }, { "@type": "DefinedTerm", "@id": "https://medtechterms.com/terms/iso-14971#term", "name": "ISO 14971", "url": "https://medtechterms.com/terms/iso-14971" } ] }, { "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://medtechterms.com/" }, { "@type": "ListItem", "position": 2, "name": "Terms", "item": "https://medtechterms.com/terms" }, { "@type": "ListItem", "position": 3, "name": "Quality & Risk", "item": "https://medtechterms.com/terms?cat=Quality%20%26%20Risk" }, { "@type": "ListItem", "position": 4, "name": "Design Controls", "item": "https://medtechterms.com/terms/design-controls" } ] }, { "@type": "FAQPage", "@id": "https://medtechterms.com/terms/design-controls#faq", "mainEntity": [ { "@type": "Question", "name": "Are design controls required for Class I devices?", "acceptedAnswer": { "@type": "Answer", "text": "Only for the Class I devices listed in 21 CFR 820.30(a)(2) - primarily devices automated with computer software and a short specific list including tracheobronchial suction catheters and surgeon's gloves. All other Class I devices are exempt from design controls but remain subject to the rest of the QMS." } }, { "@type": "Question", "name": "What is a Design History File (DHF)?", "acceptedAnswer": { "@type": "Answer", "text": "The DHF is the compilation of records describing the design history of a finished device. It must contain or reference the records needed to demonstrate the design was developed in accordance with the approved design plan and design control requirements." } }, { "@type": "Question", "name": "How do design controls change under QMSR?", "acceptedAnswer": { "@type": "Answer", "text": "The substantive requirements are preserved and mapped to ISO 13485 clause 7.3. Terminology shifts (e.g. 'design and development' rather than 'design controls'), but expectations around inputs, outputs, verification, validation, reviews, transfer, and changes remain and are enforced." } }, { "@type": "Question", "name": "When do design controls start and end?", "acceptedAnswer": { "@type": "Answer", "text": "Design controls begin when the decision is made to develop the device (not during research) and continue through design transfer to production. Post-transfer changes remain subject to design change control under 820.30(i) for the life of the device." } } ] } ] } --- [ MedTech Terms The authoritative reference ](/) Browse Learn [Latest](/latest) About 1. [Home](/) 2. / 3. [Terms](/terms) 4. / 5. [Quality & Risk](/terms?cat=Quality%20%26%20Risk) 6. / 7. Design Controls [All terms](/terms) Quality & Risk [Quality System](/ecosystems/quality-system) # Design Controls Structured process governing the design of medical devices. Reviewed by [Christian Espinosa, Founder, Blue Goat Cyber](/authors/christian-espinosa) Last reviewed May 5, 2026 ## Definition Design controls (21 CFR 820.30) are an interrelated set of practices and procedures that are incorporated into the design and development process to manage design inputs, outputs, verification, validation, transfer, and changes. What the regulation says Design controls, as mandated by FDA 21 CFR 820.30, are a foundational element of the [Quality System Regulation](/terms/qsr), ensuring that MedTech devices are designed and developed in a manner that addresses user needs and intended uses. Similarly, [ISO 13485](/terms/iso-13485):2016, a globally recognized standard for medical device quality management systems, outlines requirements for design and development planning, inputs, outputs, review, verification, validation, transfer, and changes. The [EU Medical Device Regulation](/terms/mdr) (EU [MDR](/terms/mdr-reporting)) also implicitly requires a robust design control process by stipulating [general safety and performance requirements](/terms/gspr) that necessitate thorough design and development documentation and evidence. ## What this means in practice Design controls are required for almost all Class II and Class III devices and for select Class I devices listed in 21 CFR 820.30(a)(2). They form the audit trail ( [design history file](/terms/design-history-file)) used by FDA, Notified Bodies, and internal auditors to evaluate design quality. Under [QMSR](/terms/qmsr) (effective February 2026), design controls are preserved and aligned with [ISO 13485](/terms/iso-13485) clause 7.3. The typical elements are: design and development planning, design inputs, design outputs, design review, verification, validation, transfer, and changes, with a design history file (DHF) collecting the evidence. ## Examples - A Class III implantable device team maintaining a phase-gated DHF with formal design reviews at each stage and an approved traceability matrix linking user needs to validation protocols. - A SaMD manufacturer using an electronic QMS to link software requirements (inputs) to code modules (outputs), unit tests (verification), and clinical usability studies (validation). Common pitfalls - • Treating verification and validation as interchangeable. Verification confirms outputs meet inputs; validation confirms the device meets user needs in its intended environment. - • Weak design inputs. Vague or unmeasurable inputs make verification impossible and are one of the most common Form 483 observations. - • Skipping formal design reviews or performing them without an independent reviewer, which invalidates the review evidence under 820.30(e). - • Poor design change control. Every post-transfer change requires evaluation, verification/validation as appropriate, and documentation before implementation. ## Frequently asked questions Are design controls required for Class I devices? Only for the Class I devices listed in 21 CFR 820.30(a)(2) - primarily devices automated with computer software and a short specific list including tracheobronchial suction catheters and surgeon's gloves. All other Class I devices are exempt from design controls but remain subject to the rest of the QMS. What is a Design History File (DHF)? How do design controls change under QMSR? When do design controls start and end? ## Cross-references ### Part of A larger framework or document this term belongs to. - [ Quality System Regulation(QSR / 21 CFR 820) ](/terms/qsr) - [ Design History File(DHF) ](/terms/design-history-file) ### Contains Sub-elements or required artefacts of this term. - [ Verification & Validation(V&V) ](/terms/verification-validation) ### Precedes Comes before in a typical workflow or lifecycle. - [ Design Transfer ](/terms/design-transfer) ## Related terms Grouped by theme ### Editor's picks · Hand-selected related concepts [ Quality & Risk Verification & Validation(V&V) Confirming design outputs meet inputs (V) and that devices meet user needs (V). ](/terms/verification-validation)[ Quality & Risk Design History File(DHF) Compilation of records describing the design history of a finished device. ](/terms/design-history-file)[ Standards ISO 13485 International standard for medical device quality management systems. ](/terms/iso-13485)[ Quality & Risk Quality Management System Regulation(QMSR) FDA's harmonized successor to the QSR, incorporating ISO 13485:2016 by reference. ](/terms/qmsr) ### QMS Foundations · From this learning path [ Quality & Risk Quality System Regulation(QSR / 21 CFR 820) FDA's current good manufacturing practice (cGMP) requirements for medical devices. ](/terms/qsr?from=qms-foundations)[ Quality & Risk Complaint Handling Process for receiving, evaluating, and responding to device complaints. ](/terms/complaint-handling?from=qms-foundations)[ Quality & Risk Corrective and Preventive Action(CAPA) Systematic process to investigate and resolve quality issues and prevent recurrence. ](/terms/capa?from=qms-foundations)[ Quality & Risk FDA Form 483 Notice of inspectional observations issued at the conclusion of an FDA inspection. ](/terms/form-483?from=qms-foundations) Cited by Where this term appears across MedTech Terms. Learning paths (1) - [QMS Foundations](/paths/qms-foundations)Lesson 4 of 10 Ecosystems (1) - [Quality System](/ecosystems/quality-system) ## Primary references 3 sources Link health: 1 verified 2 unchecked · last checked 2026-06-20 eCFR· 1 FDA· 1 ISO· 1 1. [1 21 CFR 820.30 Design Controls Unchecked eCFR · ecfr.gov ](https://www.ecfr.gov/current/title-21/chapter-I/subchapter-H/part-820/subpart-C/section-820.30) 2. [2 FDA Design Control Guidance for Medical Device Manufacturers Unchecked FDA · fda.gov ](https://www.fda.gov/regulatory-information/search-fda-guidance-documents/design-control-guidance-medical-device-manufacturers) 3. [3 ISO 13485 Standard Page Verified ISO · iso.org ](https://www.iso.org/iso-13485-medical-devices.html) Inline markers like \[1\] jump to the matching reference above. Sponsor note ### Tying cybersecurity into your QMS? We help align cybersecurity activities with ISO 13485 design controls and ISO 14971 risk management. [Book a 30-minute discovery session](https://go.bluegoatcyber.com/meetings/blue-goat-cyber/discovery-session) - No obligation - Expert-led from minute one - NDA available on request MedTech Terms is a community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com). Definitions are independent of any vendor. On this term Category Quality & Risk Sources 3 Updated 5/5/2026 [Compare with another term](/compare?a=design-controls) Learn in 60 seconds Card Lesson Quiz Structured process governing the design of medical devices. - · Design controls are required for almost all Class II and Class III devices and for select Class I devices listed in 21 CFR 820.30(a)(2). - · They form the audit trail (design history file) used by FDA, Notified Bodies, and internal auditors to evaluate design quality. - · Under QMSR (effective February 2026), design controls are preserved and aligned with ISO 13485 clause 7.3. Remember this Watch out: Treating verification and validation as interchangeable. Verification confirms outputs meet inputs; validation confirms the device meets user needs in its intended environment. Related terms - [Quality System Regulation(QSR / 21 CFR 820) ](/terms/qsr) - [Quality Management System Regulation(QMSR) ](/terms/qmsr) - [Design History File(DHF) ](/terms/design-history-file) - [Verification & Validation(V&V) ](/terms/verification-validation) - [ISO 13485 ](/terms/iso-13485) - [ISO 14971 ](/terms/iso-14971) You may also need Auto-suggested from Quality & Risk and shared keywords. - [Production and Process Controls ](/terms/production-process-controls) - [AAMI TIR45(TIR45) ](/terms/aami-tir45) - [Technology Transfer (Manufacturing) ](/terms/tech-transfer) - [Change Control ](/terms/change-control) - [Process FMEA vs Design FMEA(PFMEA / DFMEA) ](/terms/pfmea-vs-dfmea) - [MLOps for Medical Devices(MLOps) ](/terms/mlops-medical-device) [All Quality & Risk terms](/terms?cat=Quality%20%26%20Risk) From the Blue Goat network Related resources and services on this topic. - [ MedTech Truths Common misconceptions about medical device development - debunked. ](https://mdcmisconceptions.com) MedTech Terms An authoritative, plain-language reference for the regulatory, quality, cybersecurity, and software terms that shape modern medical devices. Browse - [All terms](/terms) - [A–Z index](/a-z) - [Categories](/categories) - [Ecosystems](/ecosystems) - [Learning paths](/paths) - [Compare terms](/compare) - [Quiz](/quiz) Resources - [FDA Medical Devices](https://www.fda.gov/medical-devices) - [EU MDR](https://eur-lex.europa.eu/eli/reg/2017/745/oj) - [IMDRF](https://www.imdrf.org/) - [Methodology](/methodology) - [Changelog](/changelog) - [Editor: Christian Espinosa](/authors/christian-espinosa) - [About this site](/about) © 2026 MedTech Terms. Reference content for educational purposes - not regulatory advice. A community resource sponsored by [Blue Goat Cyber](https://bluegoatcyber.com)