Usage Examples
- Our SOPs still reference QSR clause numbers, so the whole document set needs remapping before the next inspection.
- The Form 483 cited QSR CAPA deficiencies under 820.100.
- The legacy design history files were built to QSR design controls, not to ISO 13485 clause structure.
What is Quality System Regulation (QSR)?
Quality System Regulation (QSR) was FDA's device current good manufacturing practice framework at 21 CFR Part 820, governing design and manufacture of finished devices until the Quality Management System Regulation superseded it on February 2, 2026.
Quality System Regulation existed because FDA cannot test quality into a device after the fact. A finished device reaches a patient through design decisions, supplier choices, process settings, and complaint handling that no release test can reconstruct afterwards. QSR therefore regulated the methods, facilities, and controls behind the design, manufacture, packaging, labeling, storage, installation, and servicing of every finished device intended for human use.
Quality System Regulation covered manufacturers of finished devices, and its reach stopped there. Design controls under 820.30 bound Class III and Class II devices plus six named Class I types, so most Class I manufacturers sat outside that subpart entirely. QSR never governed premarket clearance or approval decisions; those run through the 510(k) and PMA pathways. It set how a device is built, not whether it may be sold.
Quality System Regulation is now applied mostly in reverse: as the framework your legacy documentation was written against. Procedures, design history files, and CAPA records built to 820.30 and 820.100 language have to be remapped to ISO 13485:2016 clauses under the QMSR, effective February 2, 2026. Auditors read surviving QSR numbering as a signal that the transition never finished.
Not to be confused with
- QMSR
- the same regulation after amendment, not a separate rule. Part 820 kept its citation; FDA replaced the body of its requirements with ISO 13485:2016 incorporated by reference, effective 2 February 2026.
- ISO 13485
- a voluntary international standard audited by third-party certification bodies. QSR was enforceable federal law that FDA inspected against directly, and no registrar certificate ever discharged that obligation.
- 21 CFR Parts 210 and 211
- the drug CGMP framework for finished pharmaceuticals. QSR governed finished devices intended for human use. Separate parts of Title 21, cited separately in findings.
- Design controls
- one subpart inside QSR (820.30), not the whole of it. Conformance with 820.30 never implied conformance with the rest of Part 820.
These were QSR's core obligations, stated in the past tense because 21 CFR Part 820 no longer reads this way. Item 5 is what binds a device manufacturer today.
What you must do
- 1Control the methods, facilities, and controls used for the design, manufacture, packaging, labeling, storage, installation, and servicing of every finished device intended for human use21 CFR 820.1(a)(1)
- 2Establish and maintain a quality system appropriate to the specific device designed or manufactured21 CFR 820.5
- 3Establish and maintain design control procedures for every Class III and Class II device, and for the six listed Class I device types21 CFR 820.30(a)
- 4Establish and maintain procedures for implementing corrective and preventive action21 CFR 820.100(a)
- 5Operate against 21 CFR Part 820 as amended by the QMSR, which incorporates ISO 13485:2016 by reference and took effect 2 February 202621 CFR Part 820 (QMSR), effective 2026-02-02
Common mistakes
Leaving QSR clause numbers in current SOPs
Part 820 was rewritten around ISO 13485:2016 as of 2 February 2026. A procedure that still names "820.30 design controls" as its governing requirement documents a quality system built to a superseded text, and one stale cross-reference invites the auditor to test the whole document set for the same defect.
Treating the QMSR change as a rename
The regulation kept its citation, 21 CFR Part 820, which makes the change look cosmetic. It is not. FDA replaced the substance of the requirements with an incorporated international standard, so clause structure, terminology, and record expectations all moved at once.
Assuming an ISO 13485 certificate now equals FDA compliance
ISO 13485:2016 is incorporated by reference, but the final rule layers FDA-specific requirements on top of the standard, and FDA stated the rule "does not impact our inspectional authority under section 704 of the FD&C Act." A registrar's certificate is not an FDA compliance determination.
When This Matters
- Our SOPs still reference QSR clause numbers, so the whole document set needs remapping before the next inspection.
- The Form 483 cited QSR CAPA deficiencies under 820.100.
- The legacy design history files were built to QSR design controls, not to ISO 13485 clause structure.
Frequently Asked Questions
No. The QSR was superseded on February 2, 2026, when FDA's Quality Management System Regulation amendments to 21 CFR Part 820 took effect. Part 820 still exists and still carries device CGMP requirements, but its content is now built on ISO 13485:2016, incorporated by reference.
Related Use Cases
- Medical Devices Use Cases
Prepare 510(k), PMA, and De Novo submissions with AI-guided pathway selection
- Consulting Use Cases
Manage 15+ client programs from one dashboard with per-client workspaces and tracking
- Regulatory Affairs Workflows
Cut regulatory intelligence tracking from 10+ hours/week to automated, real-time alerts
- Quality/QA Workflows
Track GxP regulation changes and enforcement trends
