Assuming an ISO 13485 certificate satisfies FDA
Incorporation by reference is not mutual recognition. A certificate from a notified body does not exempt a facility from FDA inspection.
FDA 21 CFR 820 / QMSRUS Quality System Regulation
21 CFR Part 820 sets FDA’s quality system requirements for medical devices sold in the United States. Under the Quality Management System Regulation, which took effect on 2 February 2026, Part 820 incorporates ISO 13485:2016 by reference — aligning US requirements with the international standard while retaining additional FDA-specific provisions.
- Full title
- 21 CFR Part 820 — Quality Management System Regulation
- Edition
- QMSR final rule, effective 2 February 2026
- Issued by
- US Food and Drug Administration
- Applies
- United States
What it covers
- ISO 13485:2016 incorporated by reference as the substance of the quality system
- FDA-specific additions layered on top, including device labelling and packaging controls
- Complaint handling and Medical Device Reporting
- Records subject to FDA inspection, and the agency’s access to them
- Design controls, now read through the ISO 13485 clause structure
In practice
For a company already certified to ISO 13485, QMSR converts most of the previous gap into terminology and a handful of FDA-specific additions rather than a second quality system — which was the point of the harmonisation.
For a US-only manufacturer that built to the old Part 820 clause numbering, the work is real but structural. Procedures, internal audit programmes and training records need remapping onto the 13485 architecture, and definitions shift in ways that matter, since the two do not use identical vocabulary throughout.
What has not changed is that FDA inspects. QMSR sits alongside, not instead of, the premarket pathway — 510(k), De Novo or PMA — and clearing a submission says nothing about whether your quality system holds up when an investigator arrives.
Where teams get it wrong
Remapping documents without retraining
Renumbered procedures that staff cannot navigate produce exactly the findings the remap was meant to prevent.
Confusing quality system compliance with market authorisation
They are separate obligations on separate timelines. Satisfying one does not advance the other.
Common questions
What actually changed with QMSR?
From 2 February 2026, 21 CFR Part 820 incorporates ISO 13485:2016 by reference rather than restating its own separate clause structure. FDA-specific additions remain on top, including labelling and packaging controls, complaint handling and Medical Device Reporting. The substance of the quality system is now the international standard.
Does an ISO 13485 certificate satisfy FDA?
No. Incorporation by reference is not mutual recognition. A certificate issued by a notified body does not exempt a facility from FDA inspection, and FDA investigators assess conformance directly rather than accepting a third-party certificate as evidence.
Is QMSR the same as getting a device cleared?
No, and conflating them is common. QMSR governs the quality system used to design and manufacture. Market authorisation — 510(k), De Novo or PMA — is a separate obligation on a separate timeline. Clearing a submission says nothing about whether your quality system will hold up when an investigator arrives.
Working out how FDA 21 CFR 820 / QMSR applies to what you are building is usually the first conversation.
Get in touch →