The QMSR Is in Effect — This Is Compliance, Not Preparation
FDA’s Quality Management System Regulation (QMSR) took effect February 2, 2026, replacing the old Quality System Regulation and incorporating ISO 13485:2016 by reference. The framework is now in force — not a future deadline. The substance is largely familiar, but terminology, risk emphasis, and a few requirements shifted, and FDA inspections (including one-day assessments) will evaluate against the new structure.
As of February 2, 2026, FDA’s QMSR superseded the prior Quality System Regulation at 21 CFR Part 820 and incorporates ISO 13485:2016 by reference, supplemented by FDA-specific requirements. For most manufacturers the transition window has closed; the question now is whether your quality system, documentation, and terminology actually reflect the new framework — because that is what investigators will assess.
What Actually Changed From the Old QSR
The QMSR did not start from scratch. Much of the prior Part 820 mapped closely to ISO 13485, so well-run quality systems were already substantially aligned. The meaningful changes are in framing and emphasis rather than wholesale reinvention.
| Area | Prior QSR (pre-2026) | QMSR (effective Feb 2, 2026) |
|---|---|---|
| Core standard | Standalone FDA regulation | Incorporates ISO 13485:2016 + FDA supplements |
| Risk management | Emphasized mainly in design controls | Risk-based thinking woven throughout the QMS |
| Terminology | FDA-specific (e.g., DHF, DMR, DHR) | ISO vocabulary (e.g., medical device file); FDA defines key terms |
| Management responsibility | FDA framing | ISO management-system framing |
| Labeling / UDI controls | Part 820 provisions | Retained via FDA-specific supplements |
Practically, terms like Design History File, Device Master Record, and Device History Record give way to ISO constructs such as the medical device file, even though the underlying records and intent persist. CAPA, design controls, complaint handling, and management review remain central — but described in ISO 13485 language.
Where Manufacturers Most Often Have Gaps
Common gaps cluster in a few areas: quality manuals and SOPs that still speak only in old QSR terminology; risk management that lives in design files but is not threaded through purchasing, production, and CAPA; supplier controls that do not reflect ISO 13485 expectations; and internal-audit and management-review processes that were never re-baselined to the new standard. Document cross-references (procedure-to-clause mapping) are often incomplete, which slows an inspection and invites observations.
Why This Intersects With FDA’s New Inspection Posture
The QMSR matters more now because of how FDA is inspecting. With AI-selected one-day assessments screening facilities on compressed timelines, a quality system that is only partially re-mapped to ISO 13485 is exactly the kind of finding a short, targeted visit can surface. Inspection readiness and QMSR conformance are now the same project.
A Practical Close-Out Checklist
Confirm your quality manual and top-level procedures reference ISO 13485:2016 and the QMSR. Re-map procedures to ISO clauses and FDA supplements, and verify terminology is consistent across documents. Ensure risk management extends beyond design into purchasing, production, and CAPA. Re-baseline internal audits and management review against the new standard, and run at least one internal audit under the QMSR framework. Update supplier qualification and agreements to reflect ISO expectations. Train staff so they can speak to the new structure during an inspection. And keep a clause-to-procedure cross-reference handy for investigators.
Key Takeaway
The QMSR is now the operative quality framework for FDA-regulated device makers. The substance is largely continuous with the old QSR, but the framing, terminology, and risk emphasis changed, and inspection readiness depends on whether your documentation actually reflects ISO 13485:2016. Close the mapping and terminology gaps now — especially given that a one-day assessment can land with little warning.
Frequently Asked Questions
When did the QMSR take effect?
February 2, 2026. It replaced the prior Quality System Regulation and incorporates ISO 13485:2016 by reference, with FDA-specific supplements.
Do we need full ISO 13485 certification to comply?
No. FDA does not require third-party certification; the QMSR incorporates the standard’s requirements into FDA’s regulation, which FDA enforces through inspection.
Did CAPA and design controls go away?
No. They remain central, expressed in ISO 13485 terminology rather than the prior QSR vocabulary.
How does this connect to FDA inspections?
FDA inspections — including AI-selected one-day assessments — now evaluate against the QMSR, so terminology and documentation gaps can become observations quickly.
This article is attorney advertising and is provided for general informational purposes only. It is not legal advice and does not create an attorney-client relationship. Quality-system requirements are detailed and fact-specific; consult qualified FDA regulatory counsel or a quality professional about your particular operations.
Are you in trouble with the FDA?
Don’t panic — you’ve got backup. Download 5 Tips to Help You Navigate FDA Enforcement and learn how to resolve the situation right now.