ISO 13485 and QMS Evidence for NAFDAC Device Registration

1. Key takeaways

Nigeria’s requirements for the quality management system (QMS) operate on two layers:

The current layer — the ISO 13485 certificate as a submission document. Registration applications for imported and locally manufactured devices must upload an ISO 13485 quality management system certificate, which together with the declaration of conformity, the technical dossier, and the labelling and instructions for use forms the application package. The function of the certificate is to convert the claim that manufacturing is under control into verifiable evidence that the reviewer can check against the site and product scope.

The forward-looking layer — the 2025 draft writes the QMS into the text. The 2025 draft regulation, Part 3 (Manufacture of Medical Devices, IVDs and Related Products, §17–31), provides:

• §18 Quality System;
• §22 Design Controls;
• §23 Qualification and validation;
• §24 Documentation, §25 Production, §26 Procurement and materials management, §27 QA and QC;
• §28 Contract manufacture and testing, §29 Complaints and product recall, §30 Quality Audit, §31 Non-compliance with GMP requirements.

As of the verification date the draft has not been enacted, and these provisions create no current obligations. They should be read as a forecast of where Nigerian QMS expectations are heading, useful for gap planning but not citable as requirements today.

2. Legal basis

3. Expert insights

Insight one: the IVD dossier guideline gives the QMS a chapter of its own, which means it is not an attachment.

The table of contents of the IVD dossier compilation guideline has six chapters: 1 Regional Administrative, 2 Submission Context, 3 Analytical performance and other evidence, 4 Clinical Evidence, 5 Labelling and Promotional Material, and 6 Quality Management System. Placing the QMS in Chapter 6 means the reviewer will assess that chapter on its own merits, rather than skimming it as an administrative annex.

Insight two: the GMP guideline (DER-GDL-025-00) breaks the QMS into enforceable clauses.

Sections §11.3–§11.7 of that guideline cover nonconforming product management (identification, recording, evaluation, segregation and disposition, and disposition authorisation with justification), rework, which requires retesting and re-evaluation and recording in the device history record (DHR), and the five CAPA elements (data analysis, statistical methods, investigation of causes, corrective and preventive actions, and verification of effectiveness); §12 covers labelling controls; §13 covers complaints and recalls. These are the line-by-line check items during on-site inspections.

Insight three: the GMP guideline contains one sentence on sterile device labelling worth memorising.

§12.10: particular attention should be paid to the labelling of sterile devices; for devices that are not sterile in their entirety, the labelling must correctly inform the user of the sterile part of the packaging; and single-use sterile devices must be labelled as not to be resterilised or reused. This provision corresponds directly to the refusal ground for labelling violations in Regulation 4(10)(d).

Insight four: §30 of the draft signals that a separate quality audit step may emerge.

Under the current system, QMS evidence is submitted in the form of an ISO 13485 certificate. The draft adds a dedicated §30 Quality Audit, an approach close to the manufacturing-site quality audits seen in Tanzania. If the draft is enacted, overseas plants may face a separate system audit rather than a document review only. The draft has not been enacted.

Insight five: the ISO 13485 certificate status must cover the manufacturing scope of the applied products.

The site addresses and product scope stated on the certificate must match the actual manufacturing site and the products applied for; any mismatch with the CMFS, the application form or the labelling triggers queries. This is the most common point of misalignment for companies operating multiple plants or multiple brands.

4. Practical recommendations

1. Compare the site addresses and product scope of the ISO 13485 certificate word for word with the application documents; multi-plant companies should take special care.
2. For IVD projects, compile a dedicated QMS chapter under Chapter 6 of GDL-005-01, rather than attaching only the certificate.
3. Run an internal gap check against DER-GDL-025-00, focusing on §11.3–§11.7 (nonconforming product, rework, CAPA) and §12 (labelling controls).
4. Check sterile device labelling against §12.10: indication of the sterile portion where not sterile throughout, and the prohibition on resterilisation and reuse.
5. Track the enactment progress of §30 Quality Audit of the 2025 draft and prepare system audit materials in advance.

5. Verification checklist

• □ The ISO 13485 certificate is current and its sites and scope cover the products applied for.
• □ The IVD dossier contains a QMS chapter compiled under Chapter 6 of GDL-005-01.
• □ An internal gap check against DER-GDL-025-00 has been completed (§11–§13).
• □ Sterile device labelling has been checked against §12.10 (indication of the sterile portion; no resterilisation or reuse).
• □ Certificate validity is entered in the calendar; renewal and variation filings are completed before expiry.
• □ The enactment status of §30 of the 2025 draft on quality audits is being tracked (draft only).

Regulatory information verified as of 29 October 2026. All citations above were checked against the registration guidelines published on the NAFDAC website (VBM-R&RA-GDL-001-01 §3.0; VBM-R&RA-GDL-005-01 table of contents), the GMP guideline (DER-GDL-025-00, effective 11 November 2024) and the 2025 draft regulation (Part 3 §17–§31, draft not yet enacted); this page is reviewed whenever the regulations are updated.

GRZAN support for the Nigerian market: GRZAN coordinates local licensed import entities and authorised representative resources in Nigeria, covering online submission on NAPAMS, liaison for the Dossier Screening Clearance, import permits, sample delivery and laboratory analysis support. Service capabilities include classification decisions, selection of the registration pathway, preparation of technical documentation on the IMDRF ToC, handling of the CMFS and notarisation or legalisation, GMP and overseas inspection readiness, advertisement permits, vigilance and PMS reporting, variation management and renewal. Contact: hito.lin@grzan.cn; website www.grzan.cn.