The FDA’s transition from the Quality System Regulation (QSR) under 21 CFR Part 820 to the Quality Management System Regulation (QMSR), which aligns with ISO 13485:2016, represents one of the most significant regulatory shifts for medical device manufacturers in recent years.
What Is Changing?
The QMSR replaces the prescriptive requirements of 21 CFR Part 820 with a framework that incorporates ISO 13485:2016 by reference. This means that medical device manufacturers subject to FDA oversight will now be expected to maintain a quality management system that aligns with the internationally recognized standard.
While many manufacturers already hold ISO 13485 certification, the QMSR introduces specific FDA additions and modifications that go beyond the base standard. Understanding these nuances is critical for compliance.
Key Areas of Impact
- Quality management system documentation: Organizations will need to ensure their QMS documentation reflects the structure and requirements of ISO 13485, with attention to FDA-specific expectations.
- Design controls: While ISO 13485 addresses design and development, the FDA’s expectations around design controls have historically been more prescriptive. Manufacturers should evaluate how their current design control processes align with both frameworks.
- Risk management integration: The QMSR emphasizes risk-based thinking throughout the quality system, aligning with the process-focused approach of ISO 13485.
- Supplier controls: Requirements for supplier management and purchasing controls will need to be evaluated against the combined expectations of ISO 13485 and any additional FDA requirements.
- CAPA and complaint handling: These critical processes must be assessed for alignment with the harmonized requirements.
How to Prepare
Organizations should begin by conducting a thorough gap analysis between their current quality system and the requirements of the QMSR. Key steps include:
- Review your current QMS against ISO 13485:2016 and the specific FDA additions under QMSR
- Identify gaps in documentation, procedures, and operational practices
- Prioritize updates based on risk and regulatory impact
- Conduct internal audits against the new requirements to verify implementation and effectiveness
- Engage independent audits to provide an objective assessment of readiness
The Role of Independent Audits
Independent internal audits play a critical role in the transition process. An objective, risk-based audit conducted against the QMSR requirements can identify gaps that may not be visible through internal self-assessment alone. Audit findings provide defensible evidence of compliance status and support management decision-making during the transition.
Qualyx Group provides independent, audit-only services for organizations navigating regulatory transitions. Contact us to discuss how an independent audit can support your QMSR readiness.