QMSR and ISO 13485:2016 Alignment Under Revised 21 CFR Part 820

1. Key takeaways

The Quality Management System Regulation (QMSR) took effect on February 2, 2026, amending the device current good manufacturing practice (CGMP) requirements of 21 CFR Part 820 and incorporating by reference ISO 13485:2016, Medical devices — Quality management systems — Requirements for regulatory purposes. This marks the first time the United States device quality system requirements have been aligned with the international standard. The change is not cosmetic: it restructures the clause framework manufacturers live under, it changes the inspection approach FDA applies, and it reaches every establishment that distributes devices in the US market, including those whose products are exempt from 510(k) review.

• The effective date is 2026-02-02, a calendar date that applies regardless of fiscal-year cycles.
• The incorporated standards are ISO 13485:2016 and, for terms and definitions, clause 3 of ISO 9000:2015.
• Inspection practice switched in step with the regulation: QSIT was discontinued and Compliance Program 7382.850 now governs, while 7382.845 and 7383.001 were retired.
• QMSR compliance is an establishment-level obligation that applies even where a product is 510(k)-exempt.

2. Legal basis

The instruments below, as cited in the source material, together define the new quality system framework and the inspection machinery that enforces it.

3. Expert insights

Insight one: the effective date is February 2, 2026 — not a fiscal-year date.

The FDA Device Regulation Overview page states, in its own words: “The Quality Management System Regulation (QMSR), became effective on, February 2, 2026, amending the device current good manufacturing practice (CGMP) requirements of 21 CFR part 820 and incorporating by reference … ISO 13485:2016.” This is a calendar day. It has nothing to do with the October 1 fiscal-year start associated with MDUFA, and treating it as a fiscal-year milestone is a planning error. Compliance work had to be complete against the February date, and inspection readiness follows the same calendar. Sponsors who anchored their transition plans to an October date found themselves a full eight months out of step with the requirement.

Insight two: what is aligned is not only ISO 13485:2016, but also the terms clause of ISO 9000:2015.

The FDA page explains that the QMSR incorporates by reference ISO 13485:2016 together with clause 3 (terms and definitions) of ISO 9000:2015. This means the interpretive vocabulary of the regulation — how terms are defined and how definitions are to be read — has been brought inside the regulatory framework as well. Procedure writers and auditors therefore need to work from the vocabulary of the incorporated standards, because that vocabulary now carries legal weight in the meaning of the regulation itself. Auditing against paraphrased in-house definitions instead of the incorporated terms creates findings that are avoidable by simply adopting the standard vocabulary.

Insight three: the inspection approach switched in step with the QMSR.

According to the FDA page, as of February 2, 2026 FDA stopped using the Quality System Inspection Technique (QSIT) and moved to the inspection process described in the Compliance Program for the inspection of medical device manufacturers, 7382.850. At the same time, 7382.845 (Inspection of Medical Device Manufacturers) and 7383.001 (device PMA preapproval and postapproval inspections) were retired. Preparing for an inspection under the old QSIT logic therefore no longer matches how the inspection will actually be conducted, and mock inspections should follow the new program instead.

Insight four: the QMSR is a system obligation, independent of whether a product is exempt from 510(k).

According to the FDA page, the QMSR appears among the basic regulatory requirements that manufacturers distributing devices in the United States must follow. Even where a product falls within the 510(k)-exempt scope, the manufacturing establishment is still required to comply with the QMSR. Registration, listing, and quality system obligations run in parallel with, not downstream of, the premarket pathway of any particular product. For a portfolio with mixed exemption status, this means a single quality system program serves every product line at once.

4. Practical recommendations

• Reorganize the existing quality system documentation around the clause structure of ISO 13485:2016, rather than relabeling the old QSR documents.
• Perform a gap analysis: compare the requirements of the old 21 CFR 820 against the clauses of ISO 13485:2016 one by one, and identify the requirements newly introduced by the QMSR.
• Prepare internal audit and management review records in the idiom of ISO 13485:2016, in readiness for inspections conducted under 7382.850.
• Close the evidence chain for risk management, which is typically based on ISO 14971, and design control under the QMSR.
• Map out the correspondence among the three record sets — the design history file (DHF), the device master record (DMR), and the device history record (DHR).

5. Verification checklist

• □ 2026-02-02 has been confirmed as the QMSR effective date, and preparation against the new requirements is under way
• □ Quality system documentation has been restructured around the clause framework of ISO 13485:2016
• □ A clause-by-clause gap analysis between the old 21 CFR 820 and ISO 13485:2016 has been completed
• □ Internal audit and management review records have been prepared on the new basis
• □ A mock inspection following the inspection process of CP 7382.850 has been carried out
• □ The correspondence among the DMR, the DHR, and the risk management documentation has been mapped

Regulatory information verified as of October 28, 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, US Agent and local testing support for the United States market. Our team manages FDA establishment registration and listing, 510(k)/De Novo/PMA submissions, and supports post-market reporting obligations. Business enquiries: info@grzanglobal.com