Back to QMS Foundations
Quality Management System Regulation
FDA's harmonized successor to the QSR, incorporating ISO 13485:2016 by reference.
Reviewed by Christian Espinosa, Founder, Blue Goat CyberLast reviewed September 19, 2026
Definition
Issued in 2024 and effective in 2026, the Quality Management System Regulation amends 21 CFR Part 820 to incorporate ISO 13485:2016 by reference, with additional FDA-specific requirements for records, labeling, and complaint reporting. The QMSR took effect on February 2, 2026. It retires most of the old QSR section numbers, adopts ISO 13485 terms such as 'medical device file', and keeps FDA-specific requirements on topics like complaint records, UDI and labeling controls. FDA also replaced its QSIT inspection approach with a new inspection process, and records from management reviews, internal audits and supplier audits are no longer exempt from FDA inspection. What the regulation says
FDA published the Quality Management System Regulation (QMSR) final rule on February 2, 2024, amending 21 CFR Part 820 with an effective date of February 2, 2026. The amended regulation incorporates ISO 13485:2016 by reference, aligning U.S. medical device quality management requirements with that standard while preserving FDA-specific obligations. Under 21 CFR 820.10, manufacturers must document a quality management system that meets applicable requirements. Most former Quality System Regulation section numbers have been replaced, and ISO terminology, including medical device file, now frames the requirements. For MedTech manufacturers, this changes the regulatory framework rather than eliminating obligations for design, production, corrective action, or risk management.
FDA-specific provisions include additional record requirements under 21 CFR 820.35, covering complaint investigations, servicing records, and recording unique device identification where applicable. Section 820.45 adds device labeling and packaging controls. Complaint handling must also support separate adverse event reporting obligations under 21 CFR Part 803. FDA replaced its Quality System Inspection Technique (QSIT) approach for QMSR inspections. Management review, internal audit, and supplier audit records are no longer protected by the former inspection exception in 21 CFR 820.180(c). ISO 13485 certification does not replace FDA compliance or exempt a manufacturer from FDA inspection.What this means in practice
QMSR aligns U.S. quality system expectations with international practice while retaining FDA-specific requirements around records access, labeling, unique device identification, complaint files, and servicing. Effective February 2, 2026, QMSR replaces the previous 21 CFR Part 820 QSR structure. Manufacturers must reconcile procedures, terminology (device master record vs medical device file), and records strategies before the effective date, and update supplier agreements and training programs to reflect the ISO 13485:2016 vocabulary.Examples
- A Class II manufacturer remapping its QSR-based procedures (DMR, DHF, DHR) to the ISO 13485 medical device file structure while retaining FDA-required records access clauses.
- A software-only SaMD company adopting ISO 13485:2016 as the QMS backbone with QMSR overlays for UDI and complaint file requirements.
Common pitfalls
- •Assuming ISO 13485 conformance alone is sufficient under QMSR. FDA retains specific provisions for records access, labeling, UDI, complaint files, and servicing.
- •Waiting until 2026 to start the transition. Auditors expect evidence of a planned, documented harmonization effort well before the effective date.
- •Retiring QSR terminology (DMR/DHF/DHR) without a cross-reference matrix, which breaks traceability across legacy records.
- •Ignoring supplier agreements. Many quality agreements reference 21 CFR Part 820 clauses that no longer exist under QMSR.
Frequently asked questions
February 2, 2026. On that date, the amended 21 CFR Part 820 incorporating ISO 13485:2016 by reference becomes enforceable. FDA has stated it will continue routine inspections against the new framework from day one.
Cross-references
Related terms
Grouped by themeEditor's picks
· Hand-selected related conceptsQuality & Risk
Quality System Regulation(QSR / 21 CFR 820)
FDA's current good manufacturing practice (cGMP) requirements for medical devices.
Quality & Risk
Corrective and Preventive Action(CAPA)
Systematic process to investigate and resolve quality issues and prevent recurrence.
Quality & Risk
Design Controls
Structured process governing the design of medical devices.
Standards
ISO 13485
International standard for medical device quality management systems.
QMS Foundations
· From this learning pathQuality & Risk
Complaint Handling
Process for receiving, evaluating, and responding to device complaints.
Quality & Risk
Design History File(DHF)
Compilation of records describing the design history of a finished device.
Quality & Risk
FDA Form 483
Notice of inspectional observations issued at the conclusion of an FDA inspection.
Quality & Risk
Verification & Validation(V&V)
Confirming design outputs meet inputs (V) and that devices meet user needs (V).
Cited by
Where this term appears across MedTech Terms.
Learning paths (1)
- QMS FoundationsLesson 2 of 10
Ecosystems (2)
Latest in MedTech
Sources
3 sourcesEvery citation below opens the original document. Each is graded against our source-tier hierarchy so you can see what rests on binding law versus commentary.
Tier 1Binding law and standards· 2Tier 4Trade press and expert commentary· 1
Link health: 1 verified 2 unchecked· last checked 2026-06-20
Federal Register·1FDA·1MDIC·1
- 1QMSR Final Rule (Federal Register)Tier 1 UncheckedFederal Registerfederalregister.gov
- 2FDA QMSR Final Rule PageTier 1 UncheckedFDAfederalregister.gov
- 3MDIC Case for QualityTier 4 VerifiedMDICmdic.org
Inline markers like [1] jump to the matching reference above.