FDA QMSR Transition
The FDA's Quality Management System Regulation (QMSR) replaces the long-standing Quality System Regulation by incorporating ISO 13485 by reference into 21 CFR Part 820. It aligns US medical-device quality-system requirements with the international standard most manufacturers already run, while retaining the FDA-specific obligations that ISO 13485 does not cover. The transition period ends in early 2026, after which the QMSR is the enforceable framework and QSR-era terminology and inspection tools are retired.
What an explainer is not
A topic explainer is SPEQ’s synthesis of what a practice involves, cited to the standards that govern it. It does not reproduce their text, and it does not determine which of them apply to your product or process.
[ POSITION IN THE FRAMEWORK ]
7 DIMENSIONS · 21 LINKSThe FDA QMSR incorporates ISO 13485:2016 by reference into 21 CFR Part 820, effective 2 Feb 2026, aligning US device QMS rules with the standard — but FDA-specific obligations remain, and a certificate is not compliance.
06 · QUALITY MATURITY — FDA QMSR TRANSITION, REACTIVE TO ADAPTIVE
The QMS still runs on QSR terminology; the transition is treated as a distant re-labeling exercise.
A gap assessment is planned, but ISO 13485 structure and the retained Part 820 requirements are not yet reconciled.
The QMS is built to ISO 13485 plus the FDA-specific requirements, with terminology and procedures reconciled.
Internal audit and inspection-readiness are re-mapped off the QSIT subsystems to the QMSR/ISO 13485 structure.
Risk-based quality management (ISO 14971) runs throughout, and the harmonised system reduces duplicate burden across markets.
SPEQ’s shared five-stage progression, labelled synthesis — not the FDA QMM rating scale. Where does your organization sit? Score your quality system →
07 · REGULATORY & EVIDENCE
GOVERNING STANDARDS · 3
Derived from the 3 standards SPEQ maps to this subject, across 2 regulatory bodies: FDA, ISO.
RECORDS & OBJECTIVE EVIDENCE
- A documented gap assessment against ISO 13485 plus the residual Part 820 requirements
- Quality manual and procedures reconciled to ISO 13485 terminology
- Evidence the retained FDA-specific requirements (MDR/Part 803 interfaces, labeling) are satisfied
- A risk-based approach aligned with ISO 14971 across the quality system
- Retraining records for the QMSR terminology and structure
COMMON INSPECTION FINDINGS
- Procedures still referencing QSR language after the effective date
- ISO 13485 certification treated as evidence of QMSR compliance
- FDA-specific requirements not explicitly satisfied under the harmonised system
- Audit program still organised around the retired QSIT subsystems
- The risk-based approach not made explicit throughout the QMS
What the QMSR does
The QMSR amends 21 CFR Part 820 to incorporate ISO 13485:2016 by reference, meaning device manufacturers marketing in the US must build their quality system to ISO 13485 plus the additional FDA-specific requirements that remain in Part 820. The final rule was published in early 2024 with an effective date of February 2, 2026. This ends roughly three decades of the US running a parallel-but-different quality-system regulation and reduces the duplicate documentation burden for manufacturers who already hold ISO 13485 certification for other markets.
It is important to be precise about what "harmonization" means here. The QMSR does not adopt ISO 13485 wholesale and walk away — it layers FDA-specific requirements on top and cross-references definitions so that terms like "device" carry their statutory US meaning. ISO 13485 certification is not, by itself, evidence of QMSR compliance; the FDA still inspects and still holds the FDA-specific requirements.
What changes for manufacturers
The most visible change is vocabulary and structure. QSR terms give way to ISO 13485 terms — "design history file," "device master record" and "device history record" are subsumed into ISO 13485's concepts such as the medical device file and records of production. Risk management moves to the center: ISO 13485 requires a risk-based approach throughout, and the practical expectation is alignment with ISO 14971 for the risk-management process itself.
Operationally, most companies already certified to ISO 13485 will find the gap is manageable but real. The work is a documented gap assessment against the incorporated standard plus the residual Part 820 requirements, updates to the quality manual and procedures to the new terminology, retraining, and confirmation that FDA-specific obligations are still explicitly satisfied. Companies that ran a QSR-only system without ISO 13485 have a larger uplift.
What the FDA kept
ISO 13485 does not contain everything the FDA requires, so the QMSR retains a set of FDA-specific provisions. These include requirements tied to US regulatory reporting and labeling, controls that connect the quality system to statutory obligations, and the interfaces to complaint files and to Medical Device Reporting under 21 CFR Part 803. The QMSR also preserves the FDA's inspectional authority; it does not outsource oversight to notified bodies or certification bodies.
SPEQ synthesis: read the QMSR as "ISO 13485 plus a US annex." The failure mode is assuming that an ISO 13485 certificate closes the loop — the retained FDA-specific requirements and the reporting interfaces are exactly where a QSR-era company can fall short if it treats the transition as a pure re-labeling exercise.
Inspections after the transition
The FDA is retiring the QSIT (Quality System Inspection Technique) approach built around the old QSR subsystems and moving to an inspection method aligned with the QMSR/ISO 13485 structure. Investigators will assess the quality system as an ISO 13485-structured whole with the FDA-specific requirements checked explicitly, so internal audit programs and inspection-readiness materials organized around the old four QSIT subsystems need to be re-mapped.
The transition deadline is a hard line, not a soft target: after it, referencing QSR language in procedures, or maintaining a quality manual that has not been reconciled to the incorporated standard, is a readiness gap. The prudent path is to complete the gap assessment, remediate, and retrain well before the effective date rather than at it.
FREQUENTLY ASKED
When does the QMSR take effect?
The final rule was published in early 2024 with a two-year transition, making the QMSR effective on February 2, 2026. After the effective date the amended Part 820 (incorporating ISO 13485) is the enforceable regulation and the prior QSR framework no longer applies.
Does an ISO 13485 certificate mean I am QMSR-compliant?
No. ISO 13485 is incorporated by reference, but the QMSR retains FDA-specific requirements and definitions that a certificate does not cover, and the FDA still inspects. Certification substantially reduces the gap but does not close it — the residual Part 820 provisions and US reporting interfaces still have to be satisfied.
What is the biggest practical change?
For most manufacturers it is terminology and structure — moving from QSR concepts like DHF/DMR/DHR to ISO 13485's document architecture — plus making the risk-based approach explicit throughout. Companies without existing ISO 13485 certification face a larger, more substantive uplift.
Are FDA inspections changing too?
Yes. The FDA is moving away from the QSIT subsystem-based inspection approach toward one aligned with the QMSR/ISO 13485 structure, so audit programs and inspection-readiness materials organized around the old subsystems should be re-mapped before the transition ends.