FDA QMSR Final Rule: Compliance Checklist

To reconcile FDA quality requirements with the globally accepted standard, the FDA has modified the regulatory requirements under 21 CFR 820.

The update, or Final Rule, incorporates and references core ISO 13485 quality compliance requirements. As of February 2, 2026, the revised requirements are mandatory for all medical device manufacturers in the U.S.

On account of the regulatory changes, the existing Quality System Regulation (QSR) has been replaced by Quality Management System Regulation (QMSR).

While QSR is an FDA-specific regulatory system, QMSR correlates U.S. regulations with internationally accepted standards.

It has a broader scope, adopts ISO terminology, and emphasizes through-lifecycle risk management, robust documentation and record-keeping, regular audits and stronger corrective and preventive actions (CAPA).

QMSR advances a streamlined, universal approach to compliance. It improves efficiency, enhances global market access, and reduces the administrative burden on manufacturers.

The FDA issued QMSR Final Rule on January 31, 2024. It allowed a two-year transition period for manufacturers to update quality systems, procedures and training.

The Final Rule is effective as of February 2, 2026. All device manufacturers in the U.S. are expected to be fully compliant.

Medical device manufacturers that are compliant with the FDA’s Quality System Regulation (QSR), but not ISO standards, will need to adapt their quality processes and systems to meet the new Quality Management System Regulation (QMSR).

This transition typically requires a thorough assessment and, in many cases, a significant overhaul of existing processes, documentation, training, and quality responsibilities.

Key actions for transitioning from QSR to QMSR

To support a smooth and compliant transition, medical device companies should:

Robust documentation and record-keeping are fundamental to QMSR compliance. They show the evidence that processes are followed, standards adhered to, and regulations observed.

With strong documentation, audits are simplified, risks are reduced, and actions are easily linked to people and processes.

Under QSMR, as with ISO 13485, there is a strong emphasis on proactive risk management throughout the medical device lifecycle.

The process entails the identification, assessment, mitigation and review of hazards, from conception to distribution.

Risk management is closely connected with design controls to ensure safe, effective and high-quality medical devices. As one informs the other, the two requirements are interrelated.

QMSR mandates routine audits and strengthened CAPA processes.

Internal audit reports are no longer exempt from FDA inspection. All documentation is subject to review, and must be audit-ready at all times.

CAPA processes must be structured, based on root cause analysis and sufficiently robust to address all non-conformities identified by audits, regulatory inspections and consumer complaints.

Medical device companies are required to update training programs and procedures to meet ISO 13485 standards.

Procedures must be documented and updated to reflect any changes to processes, tasks and protocols.

Under QMSR, the focus of training is risk management. Records must be maintained to prove training was provided and competency assessed before work was performed.

An in-depth understanding of QMSR requirements followed by a comprehensive gap analysis is the first step in FDA inspections prep.

Once gaps have been identified, a detailed transition implementation plan is key to informing the next steps.

It typically includes updating all documentation, with an emphasis on risk management and design controls, and training personnel on the new regulatory requirements.