๐ Quick Summary
The QMSR transition deadline is February 2, 2027. Learn what changed, what stays the same, and how to align your QMS with the new FDA requirements.
๐ฌ Get daily updates like this in your inbox. Subscribe to RegWatch Daily โ
What is QMSR?
The Quality Management System Regulation (QMSR) is FDA's modernization of 21 CFR Part 820 โ the regulation governing quality systems for medical device manufacturers. Published in February 2024, QMSR incorporates ISO 13485:2016 by reference while retaining FDA-specific requirements.
Key point: QMSR is not a new regulation. It's a structural change that aligns FDA requirements with the international standard most manufacturers already follow.
The transition period runs from February 2, 2024 to February 2, 2027. After that date, FDA will cite manufacturers against the QMSR requirements.
What Actually Changed?
QMSR preserves most Part 820 requirements but restructures them. Here's what matters:
Now explicitly required: - Management responsibility (ISO 13485 ยง5) - Context of the organization documentation - Risk-based approach to QMS processes - Documented competency verification for personnel
Removed or modified: - DHI/DMR distinction simplified - Some prescriptive requirements replaced with ISO 13485 equivalents - "Shall" requirements mapped to ISO 13485 clauses
Stayed the same: - Design controls (820.30) - Production and process controls - CAPA requirements - Complaint handling and MDR reporting
Who Must Comply?
All establishments registered with FDA as manufacturers, specification developers, repackagers, relabelers, or initial distributors of finished devices must comply with QMSR.
This includes: - US-based manufacturers - Foreign manufacturers exporting to the US - Contract manufacturers producing for US-market devices - Component manufacturers IF the component is a finished device itself
Exemptions: Same as Part 820 โ investigational devices, custom devices, and certain Class I devices remain exempt from full QMS requirements.
Get this intelligence in your inbox every morning.
Daily regulatory briefings for QA managers, SaMD teams, and startup RA leads โ personalized, actionable, free.
Subscribe Free โFree forever. Unsubscribe anytime.
Implementation Timeline
With 10 months remaining, here's a realistic implementation sequence:
Months 1-2: Gap Assessment 1. Compare current QMS to QMSR requirements 2. Identify procedures that need revision 3. Document any ISO 13485 gaps (if not certified)
Months 3-5: Procedure Updates 1. Revise management responsibility documentation 2. Update design control procedures to reference QMSR clauses 3. Add "Context of Organization" documentation
Months 6-8: Implementation & Training 1. Roll out revised procedures 2. Train personnel on changes 3. Update document control numbering/references
Months 9-10: Validation & Audit 1. Internal audit against QMSR 2. Address findings 3. Management review of transition status
Common Implementation Mistakes
Based on what we're seeing in the field, these are the errors that will generate 483s post-February 2027:
- 1Assuming ISO 13485 = QMSR compliance. It doesn't. You still need FDA-specific procedures for MDR, UDI, and 510(k) design documentation.
- 1Treating it as a documentation exercise. QMSR requires demonstrated implementation, not just procedure updates. Train your staff.
- 1Ignoring the Management Responsibility clause. ISO 13485 ยง5 requires documented management commitment, resource allocation, and regular QMS reviews. Many Part 820-only QMS don't have this.
- 1Not updating design history files. Existing DHFs don't need to be recreated, but your design control procedure must reference QMSR requirements going forward.
- 1Forgetting supplier controls. ISO 13485 ยง7.4 on purchasing is more prescriptive than Part 820.50. Review your supplier qualification records.
What FDA Inspectors Will Look For
Post-QMSR, FDA investigators will verify:
- โManagement responsibility documentation. They'll ask to see your quality policy, quality objectives, and evidence of management review.
- โRisk-based QMS. Not just device risk (ISO 14971) but QMS process risk. Which processes are highest risk? How do you control them?
- โCompetency records. Training records alone aren't enough. You need evidence that personnel are competent โ not just trained.
- โProcedure currency. Old procedures referencing "820.X" instead of "QMSR" or ISO 13485 clauses signal incomplete transition.
- โSupplier qualification. Documented evaluation criteria, approved supplier lists, and re-evaluation schedules.
The inspection process itself won't change. QARA (Quality Assurance Regulatory Assessment) will still drive the inspection sequence. But the citations will reference QMSR clauses.
๐ Sources & References
Get this intelligence in your inbox every morning.
Daily regulatory briefings for QA managers, SaMD teams, and startup RA leads โ personalized, actionable, free.
Subscribe Free โFree forever. Unsubscribe anytime.
The fastest way through the QMSR transition โ checklist, gap analysis, 90-day plan.
Get the QMSR Quick-Start Kit โ $37