Back to QMS Foundations
Quality & RiskQuality System
Design Controls
Structured process governing the design of medical devices.
Reviewed by Christian Espinosa, Founder, Blue Goat CyberLast reviewed September 19, 2026
Definition
Design controls (21 CFR 820.30) are an interrelated set of practices and procedures that are incorporated into the design and development process to manage design inputs, outputs, verification, validation, transfer, and changes. Design controls usually run through a design and development plan, design inputs (user needs turned into requirements), design outputs (drawings, specifications, software), design reviews, verification, validation, design transfer to production, and change control. Traceability between these elements is key evidence in submissions and inspections. Since the QMSR took effect on February 2, 2026, FDA enforces design controls through ISO 13485:2016 as incorporated by reference in 21 CFR Part 820, so the old section numbers are now historical. Requirements now sit in ISO 13485 clause 7.3. What the regulation says
Design controls, as mandated by FDA 21 CFR 820.30, are a foundational element of the Quality System Regulation, ensuring that MedTech devices are designed and developed in a manner that addresses user needs and intended uses. Similarly, ISO 13485:2016, a globally recognized standard for medical device quality management systems, outlines requirements for design and development planning, inputs, outputs, review, verification, validation, transfer, and changes. The EU Medical Device Regulation (EU MDR) also implicitly requires a robust design control process by stipulating general safety and performance requirements that necessitate thorough design and development documentation and evidence.What this means in practice
Design controls are required for almost all Class II and Class III devices and for select Class I devices listed in 21 CFR 820.30(a)(2). They form the audit trail (design history file) used by FDA, Notified Bodies, and internal auditors to evaluate design quality. Under QMSR (effective February 2026), design controls are preserved and aligned with ISO 13485 clause 7.3. The typical elements are: design and development planning, design inputs, design outputs, design review, verification, validation, transfer, and changes, with a design history file (DHF) collecting the evidence.Examples
- A Class III implantable device team maintaining a phase-gated DHF with formal design reviews at each stage and an approved traceability matrix linking user needs to validation protocols.
- A SaMD manufacturer using an electronic QMS to link software requirements (inputs) to code modules (outputs), unit tests (verification), and clinical usability studies (validation).
Common pitfalls
- •Treating verification and validation as interchangeable. Verification confirms outputs meet inputs; validation confirms the device meets user needs in its intended environment.
- •Weak design inputs. Vague or unmeasurable inputs make verification impossible and are one of the most common Form 483 observations.
- •Skipping formal design reviews or performing them without an independent reviewer, which invalidates the review evidence under 820.30(e).
- •Poor design change control. Every post-transfer change requires evaluation, verification/validation as appropriate, and documentation before implementation.
Frequently asked questions
Only for the Class I devices listed in 21 CFR 820.30(a)(2) - primarily devices automated with computer software and a short specific list including tracheobronchial suction catheters and surgeon's gloves. All other Class I devices are exempt from design controls but remain subject to the rest of the QMS.
Cross-references
Related terms
Grouped by themeEditor's picks
· Hand-selected related conceptsQuality & Risk
Verification & Validation(V&V)
Confirming design outputs meet inputs (V) and that devices meet user needs (V).
Quality & Risk
Design History File(DHF)
Compilation of records describing the design history of a finished device.
Standards
ISO 13485
International standard for medical device quality management systems.
Quality & Risk
Quality Management System Regulation(QMSR)
FDA's harmonized successor to the QSR, incorporating ISO 13485:2016 by reference.
QMS Foundations
· From this learning pathQuality & Risk
Quality System Regulation(QSR / 21 CFR 820)
FDA's current good manufacturing practice (cGMP) requirements for medical devices.
Quality & Risk
Complaint Handling
Process for receiving, evaluating, and responding to device complaints.
Quality & Risk
Corrective and Preventive Action(CAPA)
Systematic process to investigate and resolve quality issues and prevent recurrence.
Quality & Risk
FDA Form 483
Notice of inspectional observations issued at the conclusion of an FDA inspection.
Cited by
Where this term appears across MedTech Terms.
Learning paths (1)
- QMS FoundationsLesson 4 of 10
Ecosystems (1)
Sources
3 sourcesEvery citation below opens the original document. Each is graded against our source-tier hierarchy so you can see what rests on binding law versus commentary.
Tier 1Binding law and standards· 2Tier 2Regulator guidance and consensus· 1
Link health: 2 verified 1 unchecked· last checked 2026-06-20
eCFR·1FDA·1ISO·1
- 121 CFR 820.30 Design ControlsTier 1 VerifiedeCFRecfr.gov
- 2FDA Design Control Guidance for Medical Device Manufacturers (withdrawn February 2026, archived copy linked by FDA)Tier 2 UncheckedFDAfda.gov
- 3ISO 13485 Standard PageTier 1 VerifiedISOiso.org
Inline markers like [1] jump to the matching reference above.