Summary 21 CFR Part 820 (QMSR)
21 CFR Part 820 establishes the FDA current good manufacturing practice (CGMP) requirements for medical devices.
- Part 820 still exists as the FDA medical device quality regulation.
- As of February 2, 2026, it is titled the Quality Management System Regulation (QMSR).
- The revised rule incorporates ISO 13485:2016 by reference, aligning U.S. device quality requirements with international standards.
- It applies primarily to manufacturers of finished medical devices intended for commercial distribution in the United States.
- Non compliance can render devices adulterated under the Federal Food, Drug, and Cosmetic Act, exposing manufacturers to warning letters, import actions, injunctions, and consent decrees. According to ECA Academy’s analysis, 38 of 44 device warning letters in fiscal year 2025 cited Part 820 violations.
What Is 21 CFR Part 820?
21 CFR Part 820 is the FDA regulation establishing quality management system requirements for medical device manufacturers.
The regulation defines the controls manufacturers must implement to ensure devices are consistently:
- Designed
- Manufactured
- Packaged
- Labeled
- Stored
- Installed
- Serviced
Historically, Part 820 was known as the Quality System Regulation (QSR).
In February 2024, FDA issued a final rule titled ‘Medical Devices; Quality System Regulation Amendments’. The rule modernized Part 820 and incorporated ISO 13485:2016 by reference.
The revised regulation became effective on February 2, 2026 and is now titled the Quality Management System Regulation (QMSR).
Scope and Applicability
Part 820 applies primarily to manufacturers of finished medical devices distributed in the United States.
Organizations subject to the regulation may include:
- Finished device manufacturers
- Contract manufacturers
- Specification developers
- Repackagers and relabelers
- Remanufacturers
- Certain distributors performing manufacturing activities
Regulatory Authority
FDA enforces Part 820 under authority granted by the Federal Food, Drug, and Cosmetic Act (FD&C Act).
The law authorizes FDA to:
- Establish CGMP requirements for device manufacturers
- Inspect domestic and foreign manufacturing facilities
- Review quality system records and procedures
- Take enforcement action when requirements are not met
History of FDA Medical Device Quality Regulations
1978 – Original CGMP Rule
FDA introduced medical device current good manufacturing practice regulations to ensure consistent device quality.
1996 – Quality System Regulation (QSR)
FDA modernized the rule to include:
- Design controls
- CAPA requirements
- Supplier management
- Device quality system documentation
2024 – QMSR Final Rule
FDA issued a final rule titled ‘Medical Devices; Quality System Regulation Amendments’. The rule incorporated ISO 13485:2016 by reference into Part 820.
2026 – QMSR Effective
The revised rule took effect on February 2, 2026, formally transitioning the regulation from the legacy Quality System Regulation (QSR) to the Quality Management System Regulation (QMSR). FDA amended 179 sections across 18 parts of Title 21 CFR to align with the transition.
Key Requirements of 21 CFR Part 820
The regulation requires manufacturers to establish a comprehensive quality management system covering the entire device lifecycle.
Management Responsibility
- Establishing quality policy and objectives
- Defining roles and responsibilities
- Providing sufficient resources
- Appointing management representatives responsible for quality system oversight
- Conducting periodic management reviews
Design Controls
- Design and development planning
- Design inputs and outputs
- Design reviews
- Design verification and validation
- Design transfer to production
- Design change management
Document and Change Control
- Document approval and distribution
- Revision control
- Removal of obsolete documents
- Tracking document changes
Supplier and Purchasing Controls
- Supplier qualification and approval
- Supplier monitoring and evaluation
- Purchasing specifications
- Supplier change notification procedures
Production and Process Controls
- Controlled manufacturing procedures
- Equipment qualification and maintenance
- Environmental controls when necessary
- Monitoring and measurement of production processes
Corrective and Preventive Action (CAPA)
- Analysis of quality data
- Root cause investigation
- Implementation of corrective actions
- Verification of effectiveness
- Prevention of recurrence
FDA Inspections Under the QMSR
- ISO 13485 certification does not replace FDA inspection authority. Under the QMSR, management review, quality audit, and supplier audit reports are also subject to inspection, removing previous exemptions.
- FDA evaluates compliance with Part 820 and other applicable regulations.
- Inspections may occur at domestic or international manufacturing facilities.
Regulatory Consequences of Non Compliance
- Warning letters
- Product seizures
- Import refusals
- Injunctions
- Consent decrees
- Manufacturing shutdowns
How Kneat Supports QMSR Compliance
As the FDA transitions from the Quality System Regulation (QSR) to the Quality Management System Regulation (QMSR), medical device manufacturers must ensure their validation processes align with a more globally harmonized quality framework. Kneat Solutions provides a digital validation platform designed to support compliant, risk-based validation in regulated environments. By enabling structured protocol execution, full traceability, audit trails, and secure electronic signatures aligned with 21 CFR Part 11, Kneat helps life sciences organizations demonstrate validation integrity while supporting the quality system expectations outlined in ISO 13485 and the FDA’s evolving QMSR framework.
Key Kneat capabilities that support QMSR-aligned validation include:
- Digital validation execution for protocols such as IQ, OQ, PQ, and CSV
- End-to-end traceability linking requirements, risk assessments, test steps, deviations, and approvals
- Part 11–compliant electronic signatures and secure electronic records
- Comprehensive audit trails capturing every action, change, and approval
- Reusable validation templates and libraries to standardize validation processes
- Real-time validation status tracking and reporting for audit readiness
- Change control and impact assessment support for revalidation and lifecycle management
- Centralized validation documentation repository to maintain controlled validation records
- Role-based access controls to ensure appropriate governance and data integrity
- Inspection-ready reporting to support regulatory audits and quality reviews
FAQ
Does 21 CFR Part 820 Still Exist?
Yes. 21 CFR Part 820 still exists. The regulation was amended and retitled the Quality Management System Regulation (QMSR) effective February 2, 2026.
What Replaced the FDA Quality System Regulation (QSR)?
The legacy Quality System Regulation framework was replaced by the Quality Management System Regulation (QMSR), which incorporates ISO 13485:2016 by reference.
Does ISO 13485 Replace FDA Part 820?
No. ISO 13485 is incorporated into Part 820 by reference, but manufacturers must still comply with FDA regulations and remain subject to FDA inspections.
Does Part 820 Apply to All Medical Device Companies?
Part 820 primarily applies to manufacturers of finished medical devices distributed in the United States, although certain low risk devices may be exempt from specific CGMP provisions.
