What Is FDA QMSR (Quality Management System Regulation)?
Also known as: QMSR, 21 CFR 820 QMSR, FDA QSR replacement
Definition
The FDA Quality Management System Regulation (QMSR) is the amended 21 CFR Part 820 that replaced the old Quality System Regulation. It incorporates ISO 13485:2016 by reference and took effect on February 2, 2026 for medical device manufacturers.
FDA QMSR (Quality Management System Regulation) Explained
QMSR is the FDA's final rule, published in February 2024, that rewrote 21 CFR Part 820. Instead of listing its own quality system clauses, the regulation now incorporates ISO 13485:2016 by reference and adds a small set of FDA-specific requirements. The old Quality System Regulation (QSR) text was retired, and the compliance date was February 2, 2026.
Most device makers already certified to ISO 13485 see modest change. The shift is in vocabulary and emphasis: risk management is expected throughout the product lifecycle, and ISO 13485 terms such as design and development, purchasing controls and the quality manual replace QSR terms. Requirements outside ISO 13485, such as unique device identification (UDI), labeling controls, complaint handling tied to medical device reporting, and the device master record concepts, stay in force through the FDA-specific provisions.
In an ERP, QMSR shows up as controlled records: lot and serial genealogy, device history records, supplier approval status, nonconformance and CAPA records, change control on BOMs and routings, and training records tied to operators. In SAP this usually touches QM, batch management and document management. In Infor SyteLine it touches lot and serial tracking, QCS inspections and engineering change controls. In NetSuite, makers often add a QMS app or custom records for CAPA and complaints.
QMSR is not a software certification. An ERP cannot make a company compliant, but a well-configured ERP produces the traceable, time-stamped evidence an auditor asks for. Electronic records and signatures used for these processes also fall under 21 CFR Part 11 where applicable.
Why It Matters
- A failed FDA inspection can lead to Form 483 observations, warning letters and import holds, so the quality system evidence must be retrievable fast.
- Aligning to ISO 13485 vocabulary lets one quality system serve FDA, EU MDR and other markets with fewer duplicate procedures.
- Risk management must now be visible across design, purchasing, production and post-market, which ERP change and supplier data can support.
- Device history records and UDI data live in production and labeling transactions, so ERP configuration directly affects audit readiness.
In Practice
A contract manufacturer of infusion pump housings is asked by an auditor to show every lot of a resin used in a recalled batch. With lot genealogy in the ERP, the quality lead queries the resin lot, lists the work orders that consumed it, the serials shipped and the customers, in minutes instead of days. Without lot-controlled issues, the same exercise means reading paper travelers.
Frequently Asked Questions
What is the difference between QSR and QMSR?
The QSR had its own clause list. QMSR incorporates ISO 13485:2016 by reference and keeps a few FDA-specific requirements, such as UDI, labeling and complaint file expectations.
Do I need ISO 13485 certification to comply with QMSR?
Not by law. FDA does not require a certificate, but QMSR requires you to meet the ISO 13485 requirements as incorporated, so certification is a common way to prove it.
Does QMSR apply to component suppliers?
Finished device manufacturers are directly covered. Component makers are generally not, but device makers flow requirements down through purchasing controls and supplier agreements.
Related Terms
ISO 13485
ISO 13485 is the international quality management system standard for organizations involved in the design, production, installation, or servicing of medical devices, emphasizing regulatory compliance, risk management, and documented traceability throughout the product lifecycle.
FDA 21 CFR Part 11
FDA 21 CFR Part 11 is the US regulation that defines the criteria under which the FDA accepts electronic records and electronic signatures as equivalent to paper records and handwritten signatures, requiring validation, audit trails, access controls, and signature integrity.
Traceability
Traceability is the ability to follow the history, location, and application of a part or material through the supply chain and production process, both backward to its sources and forward to every product and customer it reached.
ISO 9001
ISO 9001 is the international standard specifying requirements for a quality management system, enabling an organization to consistently provide products and services that meet customer and regulatory requirements and to improve through a process-based, risk-aware approach.
FMEA (Failure Mode and Effects Analysis)
FMEA (Failure Mode and Effects Analysis) is a structured risk assessment that identifies how a product or process can fail, the effects and causes of each failure, and existing controls, then prioritizes actions to prevent the highest-risk failures.
Working with FDA QMSR (Quality Management System Regulation) in a live environment? Our engineers do this every day - and our AI agents automate most of it.