FDA QMSR 2026: what medical-device manufacturers need to change
The Quality Management System Regulation is now in effect. The practical challenge is not simply updating a quality manual—it is making sure the production floor, supplier controls, records, and corrective-action systems operate in a way that supports the revised FDA framework.
QMSR is now the FDA quality-system framework
On February 2, 2026, FDA’s Quality Management System Regulation became effective and amended 21 CFR Part 820 by incorporating ISO 13485:2016 by reference, together with FDA-specific requirements. FDA also stopped using the Quality System Inspection Technique and began using the inspection process described in Compliance Program 7382.850.
1. Re-map the quality system to the revised framework
Start by identifying where existing procedures, work instructions, forms, supplier controls, validation protocols, and management processes map to QMSR and ISO 13485 requirements. The goal is to find gaps and overlaps before revising documents.
Questions to ask
- Do manufacturing procedures identify the records needed to demonstrate control?
- Are responsibilities clear between quality, engineering, operations, and suppliers?
- Do CAPA and nonconformance systems connect to measurable evidence?
- Are supplier controls proportionate to the quality risk they introduce?
2. Verify that procedures match what actually happens
A procedure can be complete on paper and still fail operationally if operators use a different sequence, acceptance criterion, tool, or record. A practical QMSR readiness review should therefore include observation of the actual process and comparison against controlled documentation.
For manufacturing teams, this often means reviewing process parameters, work instructions, training, inspection criteria, equipment qualification, traceability, and change-control pathways together rather than as separate files.
3. Revisit process validation and objective evidence
Where process output cannot be fully verified by subsequent inspection or test, validation remains an important control. The useful question is not simply whether an IQ/OQ/PQ package exists, but whether the validation strategy demonstrates that the process is capable, repeatable, appropriately challenged, and supported by meaningful acceptance criteria.
4. Strengthen supplier-quality ownership
Finished-device manufacturers depend on contract manufacturers and critical suppliers, but outsourced work does not remove quality responsibility. Supplier qualification, monitoring, change notification, nonconformance escalation, and corrective-action verification should operate as one connected system.
Recurring supplier defects are a warning sign that the system may be closing individual failures without removing the process condition that causes them.
5. Prepare for the new inspection approach
FDA states that the updated medical-device inspection program took effect with QMSR. That makes it especially important to ensure that the organization can produce coherent evidence showing how requirements are implemented—not only where a policy is stored.
A practical implementation sequence
- Requirement: identify the applicable QMSR and ISO 13485 expectation.
- Risk: determine what process, product, or supplier risk must be controlled.
- Process control: define instructions, parameters, validation, acceptance criteria, training, and ownership.
- Evidence: create records and metrics showing the process is operating as intended.
- Corrective action: use nonconformance, root cause, CAPA, supplier action, and change control to close the loop.
QMSR does not automatically mean ISO 13485 certification
FDA’s QMSR incorporates ISO 13485:2016 requirements by reference, but FDA does not require a company to obtain an ISO 13485 certification merely to comply with QMSR. Certification and FDA compliance are related concepts, but they are not the same thing.
Official FDA references: Quality Management System Regulation (QMSR) and CDRH Compliance Programs.