SafeLink Consulting Blog

QSR vs. QMSR: What Changed & What It Means for Device Manufacturers

Gary Morgan, CDT, CQA/ASQ
Posted by Gary Morgan, CDT, CQA/ASQ on Sep 3, 2026, 11:47:08 AM

QSR vs. QMSR: What Changed and What It Means for Manufacturers 

For three decades, FDA investigators evaluated device manufacturers against a single, homegrown rulebook: 21 CFR Part 820. That era ended in February 2026. The Quality System Regulation (QSR) has been replaced by the Quality Management System Regulation (QMSR), which builds on ISO 13485:2016 rather than the FDA's own standalone framework. For quality teams, this is more than a citation change — it reshapes what investigators look for during an inspection, the language they use to ask about it, and the documentation readiness expected in response. Here's what the QSR-to-QMSR shift actually changes, and what it means the next time an FDA investigator walks through your door. 

 

Background : Why the change? 


The Quality System Regulation (QSR), 21 CFR Part 820, was written in 1996 and served as the FDA’s own framework for medical device quality systems. The Quality Management System Regulation (QMSR), finalized in February 2024 and effective February 2026, largely incorporates by reference ISO 13485:2016 rather than rewriting requirements from scratch. 

The FDA’s goal was to reduce the dual-compliance burden on manufacturers who sell globally and must satisfy both FDA and international standards. The structural shift sounds subtle, but for inspections it matters considerably. 

 

How does this change affect inspections?

 

Under QSR 


The investigator worked from 21 CFR Part 820 directly — a U.S.-specific checklist of discrete requirements written in FDA regulatory language. Everything was self-contained within the Code of Federal Regulations (CFR). 

Under QMSR 


The investigator now works from ISO 13485:2016 as the substantive standard, supplemented by a handful of FDA-specific additions retained in 21 CFR Part 820. This means inspectors must be fluent in ISO clause structure (Clauses 4–8), not just the old QSR section numbering. 

It also means that the quality management personnel of the company being inspected must also be fluent in ISO as well to ensure good communication during the inspection process. 

What needs to be understood is that while the ISO13485 standard is the framework for a quality management system, the QMSR is not just ISO 13485. The FDA retained several requirements that have no ISO equivalent:  

FDA-Specific Requirement

What Inspectors Check

Medical Device Reporting (MDR) 21 CFR Part 803

Complaint-to-MDR decision process, 30-day and 5-day reporting timelines, documentation of MDR decisions including when complaints are determined not to be reportable

Unique Device Identification (UDI)

Labeling compliance, GUDID database submissions, UDI placement on device and packaging

Registration and Listing 21 CFR Part 807

Current device listing accuracy, establishment registration status

Corrections and Removals 21 CFR Part 806

Documentation of field actions, 510(k) or PMA implications of corrections

Design Control Applicability

No ISO equivalent carve-out — FDA applies design control requirements to all Class II and III devices without exception

 

 

The Practical Bottom Line for Quality Teams 

For a quality director preparing for an FDA inspection today versus five years ago, the differences come down to a few core shifts: 

> Less ‘did you have a procedure’ and more ‘does your system function as an integrated whole’. Inspectors are looking at whether risk management, design controls, CAPA, and post-market surveillance actually talk to each other. 

> ISO 13485 fluency is now required on both sides of the inspection table. 

> The retained FDA-specific requirements (MDR, UDI, registration) remain non-negotiable and are inspected as rigorously as ever. 

> Documentary readiness matters more.  Records must be retrievable and shareable quickly and preferably in electronic form. 

 

For a practical, question-by-question audit of your own management controls under this framework, see our companion post, How Would Your Management Controls Stand Up in an FDA Inspection?

 

SafeLink Consulting assists dental laboratories and medical device manufacturers with QMS - Quality Management Systems and FDA compliance. Learn about FDA Dental Regulations


Topics: Dental Laboratory, Quality Management System, FDA Compliance, Medical Device Manufacturers

Subscribe To Our Blog

Most Popular

SafeLink Consulting is a premier advisor in safety programs, environmental controls, quality management systems, and privacy practices, with over 30 years of experience supporting businesses nationwide. We partner with dental, medical, and general industry clients to build and manage risk & compliance systems and practices.  SafeLink delivers integrated risk & compliance across OSHA, FDA, and HIPAA—serving as a single, trusted partner in a rapidly evolving industry.  Our advisory solutions include consulting, support tools, and managed services.

 

Contact Sales