What changed
The FDA has replaced the Quality System Regulation under 21 CFR 820 with the Quality Management System Regulation, which incorporates ISO 13485 by reference. Rather than maintaining a US-specific quality system alongside an international one, manufacturers can now build largely one system.
For a company selling in both the US and internationally, this is a genuine reduction in duplicated effort — previously the QSR and ISO 13485 covered similar ground in incompatible language, and manufacturers maintained mappings between them.
What it means in practice
| If you… | What harmonization means |
|---|---|
| Already hold ISO 13485 | You are most of the way to QMSR. Gap-close rather than rebuild |
| Comply with the old QSR only | Transition work — the structure and terminology change |
| Are building a QMS now | Build once, to ISO 13485, aligned to QMSR from the start |
| Sell US and internationally | The largest saving — one system instead of two |
The strategic point for anyone starting: build the QMS once. Implementing to ISO 13485 with QMSR alignment scoped in from day one costs far less than certifying to ISO 13485 and retrofitting FDA alignment afterwards. That is the argument we scope for by default — see ISO 13485 consulting.
Where FDA-specific requirements remain
Harmonization is not identity, and the residual differences are where US manufacturers get caught out.
Terminology and definitions. The FDA retains certain definitions that differ from ISO usage, and documentation should use the right ones for the right audience.
Record-keeping specifics. Some FDA record and labelling expectations sit outside ISO 13485 and remain in force.
Inspection versus audit. An FDA inspection is not a certification audit. Different authority, different powers, different consequences — a certificate does not preclude an inspection or determine its outcome.
Reporting obligations. Medical device reporting, recalls and corrections are FDA regulatory duties, not QMS clauses. ISO 13485 does not cover them.
Establishment registration and device listing. Entirely outside the quality system.
What to do about it
If you hold ISO 13485: run a QMSR gap review rather than assuming equivalence. The overlap is large but the residual FDA-specific items are real, and they are the ones an inspection will find.
If you are on the old QSR: plan a transition rather than a rename. Structure and terminology change, procedures need rewriting, and staff need retraining on the new framing.
If you are building now: scope both from the start. This is the cheapest position anyone is in and it is worth not squandering by treating FDA alignment as a later phase.
In all cases: keep the FDA-specific obligations visible in your quality system even though they are not ISO clauses. Reporting, recalls, registration and listing do not become someone else's problem because the QMS is harmonized.
Does this mean I need ISO 13485 certification?
Not automatically. The FDA regulation is what binds you; certification to ISO 13485 by a certification body is a separate, voluntary act.
Most manufacturers pursue it anyway, because international market access — EU, Canada, and MDSAP participants — generally expects the certificate, and because a certified system is easier to demonstrate to customers and partners than an uncertified one. See what certification costs.
FAQs
What is the FDA QMSR?
The Quality Management System Regulation, the FDA's quality system requirement for medical device manufacturers, which incorporates ISO 13485 by reference and replaces the previous Quality System Regulation under 21 CFR 820. It substantially aligns US quality system requirements with the international standard.
Does ISO 13485 certification make me FDA compliant?
Not automatically. The QMSR incorporates ISO 13485, so a compliant ISO 13485 system covers most of it, but FDA-specific obligations remain — including medical device reporting, recalls and corrections, establishment registration and device listing, none of which are ISO 13485 clauses.
What is the difference between QMSR and the old QSR?
The QSR was a US-specific quality system regulation written in its own structure and terminology. The QMSR incorporates ISO 13485, so US requirements now largely follow the international standard. Manufacturers previously maintained mappings between the two; that duplication is substantially removed.
Do I still need ISO 13485 certification if I only sell in the US?
The FDA regulation binds you; certification is voluntary and separate. Many US-only manufacturers still certify because customers and partners expect it and because a certified system is easier to demonstrate, but it is a commercial decision rather than a regulatory requirement for the US market alone.
What should I do if I already hold ISO 13485?
Run a QMSR gap review rather than assuming equivalence. The overlap is large, but residual FDA-specific requirements around terminology, records, reporting, recalls, registration and listing remain in force and are exactly what an FDA inspection examines.
Where to go next
See ISO 13485 consulting, what certification costs, or what a medical device QMS is.