![](/sites/default/files/editorial_images/Green1000_2.jpg)
Photo by Lucas Vasques on Unsplash
On Jan. 31, 2024, the U.S. Food and Drug Administration (FDA) released its final rule for the new Quality Management System Regulation (QMSR).
ADVERTISEMENT |
The new QMSR is the result of aligning the current good manufacturing practice (cGMP) requirements of the FDA’s quality system regulation (QSR) with the international consensus standard for medical device quality management systems, ISO 13485:2016.
Cue the applause: The medical device industry has been buzzing about harmonization between the FDA’s QSR and ISO 13485 since 2018, and now it’s finally happening.
Well, almost. The effective date of enforcement for the QMSR is Feb. 2, 2026. So, there are still a couple of years until medtech companies will need to comply with the new regulation.
Still, this is a major step toward harmonization, and one that medical device professionals have been anticipating for a long time.
Let’s cut to the chase. Why is the FDA harmonizing the standards, what do the new changes look like, and how will this change affect medical device companies? This article will address these questions and explain everything you need to know about QMSR moving forward.
How does the QMSR differ from the QSR?
The FDA is incorporating ISO 13485 into the current QSR “by reference,” meaning the new QMSR will address certain requirements by referencing their location in ISO 13485:2016. This will, of course, result in substantial changes to 21 CFR Part 820 as we know it.
Many of these changes are semantic in nature and don’t change the basic QMS requirements for medical device companies. For instance, you’ll notice that the terms device master record (DMR), design history file (DHF), and device history record (DHR) don’t appear in the final rule.
That doesn’t mean, however, that the documentation requirements of the DMR, DHR, and DHF have been eliminated. The FDA simply believes those requirements are adequately described in ISO 13485 and will be covered by the catch-all term medical device file (MDF).
On the other hand, there are terms and definitions in ISO 13485 that, according to the Federal Register, “could create inconsistencies with the FDA’s statutory and regulatory framework.”
In these cases, the FDA’s definitions will supersede those of ISO 13485. For example, “device” and “labeling” will supersede the definitions for “medical device” and “labeling” in ISO 13485.
The final rule also includes several new sections in Part 820:
• Section 820.7, incorporation by reference
• Section 820.10, requirements for a quality management system
• Section 820.35, control of records
• Section 820.45, device labeling and packaging controls
For context, here’s a screenshot of the table of contents from the QMSR final rule.
That last section, 820.45, could use a little more attention. The FDA has previously pointed out that there are device recalls every year related to product labeling and packaging.
Clause 7.5.1(e) of ISO 13485 states that “defined operations for labeling and packaging shall be implemented,” but the FDA doesn’t seem to think this goes far enough. That’s why the agency is introducing a new labeling and packaging clause to the proposed Part 820.
Section 820.45 will require “procedures that provide a detailed description of labeling and packaging activities to ensure the integrity, inspection, storage, and operations for labeling and repackaging.”
The main items Section 820.45 will require are:
• UDI or UPC
• Expiration date
• Storage instructions
• Handling instructions
• Processing instructions
Keep in mind, this is all in addition to 21 CFR Part 801—Labeling, which lays out the specific requirements for the labeling of medical devices.
February 2026 will be here sooner than you think. So, it’s worth it to start looking at your current labeling and packaging procedures now—and start getting them in line with what will be expected.
Why is the FDA harmonizing QSR and ISO 13485?
Although ISO 13485 has been revised repeatedly over the past two decades, the QSR remains nearly unchanged since it was released in 1996.
When it first proposed the QMSR, the FDA admitted that “regulatory expectations for a QMS have evolved since the current Part 820 was implemented over 20 years ago,” and that, “By proposing to incorporate ISO 13485 by reference, we are seeking to explicitly require current internationally recognized regulatory expectations for QMS for devices subject to the FDA’s jurisdiction.”
The FDA also notes that it has paid attention to the revisions of ISO 13485 over the years, and the agency feels the 2016 version of the standard is closely aligned with requirements of 21 CFR Part 820. All ISO standards are reviewed every five years to decide whether they need updating; the current version of ISO 13485 was last confirmed in 2020.
The FDA repeatedly mentions in its final rule that the QMS requirements in Part 820 and ISO 13485 are substantially similar, and the burden of complying with the new QMSR should not be any greater than that of current compliance with the QSR.
In fact, the agency believes that harmonization will further the cause of “regulatory simplicity and global harmonization, and should reduce burdens on a regulated industry, thereby providing patients more efficient access to necessary devices.”
What does the FDA QSR transition to ISO 13485 entail?
While this may seem like a lot of change for medical device manufacturers, it’s important to keep in mind that the requirements of ISO 13485:2016 and the QSR are really not all that different. The QMSR will not require a total overhaul of your QMS, but should hopefully make life easier for everyone involved.
With that said, there are a few things to keep in mind regarding the new QMSR:
• The final rule also amends 21 CFR Part 4—“Regulation of Combination Products.” The FDA has made “conforming edits” to clarify QMS requirements for combination products. Note that these edits don’t affect the cGMP requirements for combination products.
• The FDA does intend to change its inspection process (QSIT) to ensure that it’s using an inspection approach consistent with the requirements in the QMSR, but isn’t ready to share how just yet. You can find more information on inspections in Comment 81, as well as its response.
Getting or having ISO 13485:2016 certification does not mean you’ll automatically be in compliance with the new QMSR. You won’t be exempt from FDA inspections if you are already ISO 13485-certified. You won’t be issued an ISO 13485 certification of conformance after an FDA inspection.
It’s a good idea to get familiar with these sections of the QMSR now and consider how you’ll achieve compliance with their requirements, even if you’re currently in conformity with ISO 13485:2016.
Published July 1, 2024, in the Greenlight Guru blog.
Comments
If you want to know more about this...
This is great information. If you are in the Chicago area, I invite you to attend the Innovate for Excellence Summit where the QMSR and ISO13485 will be among the topics discussed.
I won't share the link here because I don't want it to seem like advertising (although it kind of is), but you can find more details on the ASQ Chicago Website. Or email me for more information.
Add new comment