QMSR vs QSR: What Changed for Medical Device Companies in 2026

What Is QMSR?

The Quality Management System Regulation (QMSR) is FDA's final rule published on February 2, 2024 (89 FR 7496), which amends 21 CFR Part 820 to incorporate by reference the international standard ISO 13485:2016, "Medical devices — Quality management systems — Requirements for regulatory purposes."

The rule became effective on February 2, 2026, giving manufacturers a two-year transition period. QMSR represents the most significant change to US medical device quality requirements since the original QSR was finalized in 1996 (61 FR 52602).

FDA's stated goals for QMSR include: reducing regulatory burden on manufacturers who already comply with ISO 13485, harmonizing US requirements with international standards, and promoting consistent global quality practices. The rule does not change the statutory authority under Section 520(f) of the Federal Food, Drug, and Cosmetic Act (21 USC 360j(f)).

Key Differences: QSR vs QMSR

Importantly, QMSR does not eliminate any existing FDA safety requirements. Manufacturers must comply with both ISO 13485:2016 and the additional FDA-specific requirements spelled out in the revised Part 820 regulation.

ISO 13485:2016 Alignment

ISO 13485:2016 is the international standard for medical device quality management systems, published by the International Organization for Standardization. It is already required or recognized by regulators in the EU (under the Medical Device Regulation 2017/745), Canada (CMDCAS), Japan (QMS Ordinance), and over 50 other countries.

By incorporating ISO 13485:2016, QMSR means that device manufacturers who already hold ISO 13485 certification are substantially compliant with the new US requirements. Key alignment areas include:

• Process-based approach: ISO 13485 uses a process model similar to ISO 9001, emphasizing the interaction between quality management processes
• Risk management integration: ISO 13485 Clause 7.1 requires risk management throughout the product lifecycle, aligning with ISO 14971
• Documentation requirements: ISO 13485 Clause 4.2 requires a quality manual, documented procedures, and records that parallel former QSR requirements
• Supplier controls: ISO 13485 Clause 7.4 covers purchasing controls, aligning with former QSR 820.50

Transition Requirements and Timeline

As of February 2, 2026, QMSR is fully effective. FDA inspectors are now inspecting against the new regulation, which means they will assess compliance with ISO 13485:2016 plus the retained FDA-specific requirements. Companies that have not yet transitioned face inspection findings and potential enforcement.

Impact on Quality Systems

The practical impact of QMSR depends on your company's current state of compliance:

Already ISO 13485 Certified

If your company already holds ISO 13485:2016 certification, the transition is primarily a gap analysis exercise. You need to verify that your quality system also addresses the retained FDA-specific requirements, including Medical Device Reporting (21 CFR 803), complaint handling specifics, and corrections and removals (21 CFR 806).

QSR-Only Compliance

Companies that were compliant with the old QSR but not certified to ISO 13485 will need more substantial updates. Key areas requiring attention include:

• Creating or updating a quality manual (ISO 13485 Clause 4.2.2), which was not explicitly required under the old QSR
• Implementing management review processes aligned with ISO 13485 Clause 5.6, including specific required inputs and outputs
• Updating documentation control to meet ISO 13485 Clause 4.2.4 requirements for document approval, review, and update processes
• Establishing a formal risk management process integrated throughout the quality system per ISO 13485 Clause 7.1

What Device Companies Should Do Now

Since QMSR became effective on February 2, 2026, companies should take immediate action if they have not already completed the transition:

1. Conduct a gap analysis: Compare your current quality system against ISO 13485:2016 and the retained FDA requirements in revised Part 820
2. Prioritize high-risk gaps: Focus first on design controls, CAPA, complaint handling, and supplier management — these are the areas most frequently cited in FDA inspections
3. Update procedures and work instructions: Reference ISO 13485 clause numbers in your procedures where applicable
4. Train your team: All quality and manufacturing personnel need training on the new requirements and any process changes
5. Consider ISO 13485 certification: While not required by FDA, third-party certification provides independent verification and can streamline inspections
6. Review your registration status: Ensure your FDA establishment registration and device listings are current via FURLS

Resources and Next Steps

For more information on QMSR compliance and medical device registration:

• Assurentry's Medical Device 510(k) Guide — step-by-step through the premarket notification process
• FDA QMSR Final Rule: 89 FR 7496 (February 2, 2024) — full text of the regulation
• ISO 13485:2016: Available from ISO or ANSI for purchase
• FDA Guidance: "Quality System Regulation — Amendments to Incorporate ISO 13485" — FDA's guidance document for the transition