Device Tracking Obligations under 21 CFR Part 821

1. Key takeaways

Under 21 CFR Part 821, certain devices must be traced through the distribution chain. The official FDA page states clearly that the initial importer has four obligations, among them device tracking (21 CFR 821), where applicable, and that foreign manufacturing sites are likewise subject to device tracking, where applicable. Which devices are subject to the tracking obligation is determined by FDA, not left to the discretion of the company. This means every company in the chain must first establish whether its product falls within the tracked categories before it can decide how the obligation applies, and that determination should be documented rather than assumed in either direction. Because the determination is made by reference to FDA’s designations and not by the company’s own risk assessment, the reference point is always the regulation and the FDA pages, pending verification whenever the product mix changes.

2. Legal basis

The tracking obligations described here rest on the following provisions and FDA guidance documents, in force as of the verification date noted at the end of this page. The importer and foreign-site obligations cited in the guidance table sit on top of the general tracking framework established by Part 821 itself.

3. Expert insights

Insight one: the phrase where applicable in the tracking obligation depends on whether FDA has placed the device within the tracking scope.

Under 21 CFR Part 821, tracking requirements target specific device categories, and FDA’s determinations govern, pending verification against the current lists. When a company takes on a product, it must first confirm whether that product falls within the tracking scope; it cannot default to applicability or default to non-applicability. The practical estimate is that this confirmation belongs in the product onboarding review, with the supporting rationale retained, because a tracking obligation discovered late in the product life is far more expensive to satisfy than one identified at intake. Retrospectively reconstructing a distribution chain for a product already on the market requires cooperation from distributors who may no longer hold complete records, and that gap cannot be closed by documentation effort alone.

Insight two: tracking is one of the importer’s independent obligations.

According to the FDA importing page, the four obligations of the initial importer are: establishment registration, MDR (21 CFR 803), corrections and removals reporting (21 CFR 806), and device tracking (21 CFR 821, where applicable). Tracking stands among them as an independent item, not as an appendage of MDR. Managing it as a subtask of the MDR workflow will underserve it: the data it requires, the records it maintains, and the triggers that activate it are all different from those of adverse event reporting, and the two obligations should be tracked separately in the quality system. Presenting the four importer obligations as a fixed checklist, with tracking given its own line and its own owner, prevents it from being crowded out by the more event-driven reporting duties.

Insight three: foreign manufacturing sites are equally bound by the tracking obligation.

The FDA importing page states explicitly that foreign manufacturing sites must accept device tracking, where applicable. This is consistent with the obligations of foreign companies in registration, listing, and MDR: foreign status brings no exemption. A foreign manufacturer whose devices are tracked cannot delegate the underlying record-keeping entirely to its US importer, because the traceability begins at the point of manufacture and the site’s own records are the origin of the chain. The same logic applies to contract manufacturers and specification developers within the tracked scope: every position in the chain contributes a segment of the record, and the chain is only as strong as its weakest segment.

Insight four: tracking data is the execution foundation for recalls and corrections and removals.

When an event requires a recall, tracking records determine whether the company can quickly locate the final users of the affected devices, lot by lot. Without tracking records, a correction or removal under 21 CFR 806 is difficult to execute. The practical estimate is simple: the quality of a field action is bounded by the quality of the distribution records behind it, and a company that cannot name the recipients of a tracked lot cannot demonstrate an effective recall regardless of how promptly the report was filed. This is why the tracking obligation and the corrections-and-removals obligation should be read as one system: the first supplies the addresses, the second supplies the action.

4. Practical recommendations

• Before taking on a product, confirm whether it falls within the tracking scope of 21 CFR 821 and retain the basis for the determination in the product file.
• For products within the tracking scope, build distribution chain records capable of locating the final delivery recipient of every tracked unit.
• Importers should manage tracking as an independent obligation item, not merged with MDR.
• Link tracking records with recall contingency plans, as the foundation for execution under 21 CFR 806.
• Foreign manufacturing sites should build tracking capability in step with the importer, with data connected between the two.

5. Verification checklist

• □ Whether the product falls within the 21 CFR 821 tracking scope has been determined, with the basis retained
• □ Distribution chain records have been built for products within the tracking scope
• □ Records can locate the final delivery recipient
• □ The importer has listed tracking as an independent obligation item
• □ Tracking records have been linked with 21 CFR 806 recall contingency plans
• □ Tracking data between the foreign site and the importer has been connected

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, US Agent and local testing support for the United States market. Our team manages FDA establishment registration and listing, 510(k)/De Novo/PMA submissions, and supports post-market reporting obligations. Business enquiries: info@grzanglobal.com