ISO 13485:2016 vs FDA QMSR
The device quality-system pair that just became (mostly) one.
What a comparison is not
A comparison is SPEQ’s reading of how two published documents differ. Neither is the right answer, it is not a determination of which applies to you, and neither is summarised in a way that replaces reading it.
ISO 13485:2016 is the international quality-management-system standard for medical devices. The FDA’s Quality Management System Regulation (QMSR) is the rewrite of 21 CFR Part 820 that incorporates ISO 13485:2016 by reference, replacing the old Quality System Regulation. As of 2 February 2026 the two are largely harmonised — but QMSR keeps US-specific overlays.
| ASPECT | ISO 13485:2016 | FDA QMSR |
|---|---|---|
| What it is | A voluntary international standard (certifiable by a notified/registration body) | A binding US federal regulation enforced by the FDA |
| Relationship | The base QMS requirements | Incorporates ISO 13485:2016 by reference, then adds US requirements |
| Status | Current edition 2016 (a new edition is in progress internationally) | Final rule Feb 2024; enforceable from 2 Feb 2026 (replaces the QSR) |
| Terminology | ISO terms (e.g., “top management”, “documented information”) | Reconciles ISO terms with FD&C Act / US regulatory definitions |
| US-specific overlays | None — it is jurisdiction-neutral | Labeling/packaging controls, UDI, complaint files tied to MDR reporting, record specifics |
| How you demonstrate it | Certification audit by a recognised body (e.g., under MDSAP) | FDA inspection against 21 CFR 820 as amended |
| Global leverage | Accepted across many markets; MDSAP builds on it | Harmonisation reduces the US-vs-ISO gap for firms already 13485-certified |
ISO 13485 certification is the international passport: if you sell outside the US, or want an MDSAP-friendly baseline, build the QMS to ISO 13485:2016 first.
QMSR is not optional if you market devices in the US — from 2 Feb 2026 the FDA inspects against it. A firm already certified to ISO 13485:2016 is most of the way there and should focus on the US-specific overlays.
This used to be a genuine two-system burden; the QMSR closes most of the gap by adopting ISO 13485:2016 wholesale. Treat ISO 13485 as the engine and QMSR as the engine plus a US wiring harness — the additions are labeling/UDI, complaint-to-MDR linkage, and record specifics, not a second quality system.
ISO 13485:2016 vs FDA QMSR: frequently asked questions
Common questions on how ISO 13485:2016 and FDA QMSR differ and when each applies.
Does ISO 13485 certification make me QMSR-compliant?
It gets you most of the way, because QMSR incorporates ISO 13485:2016 by reference — but not all the way. QMSR layers US-specific requirements (labeling and packaging controls, UDI, complaint handling tied to Medical Device Reporting, and certain record requirements) on top, and compliance is judged by FDA inspection, not an ISO certificate.
When does QMSR take effect?
The FDA published the final rule in February 2024 with a two-year transition; it becomes effective and enforceable on 2 February 2026, replacing the prior Quality System Regulation (the old 21 CFR Part 820).
Is the old QSR still in force?
Until 2 February 2026, yes — the prior 21 CFR Part 820 (QSR) applies. From that date the QMSR (the amended Part 820 incorporating ISO 13485:2016) replaces it.
Does QMSR require ISO 13485 certification?
No. QMSR incorporates the ISO 13485:2016 requirements into US law, but it does not require you to hold a third-party ISO 13485 certificate. You must meet the requirements; certification is a separate, voluntary market credential.