The QMSR Deadline Has Passed. Is Your Documentation Ready for an FDA Investigator?

As of February 2, 2026, the FDA’s Quality Management System Regulation (QMSR) replaced the Quality System Regulation (QSR), incorporating ISO 13485:2016 by reference into 21 CFR Part 820. The Quality System Inspection Technique (QSIT) has been withdrawn. The new FDA Compliance Program for inspection of medical device manufacturers is now in effect.

This is not a transition period. If an FDA investigator walks into your facility today and finds your CAPA procedure still combines corrective and preventive action—or your training records cannot demonstrate personnel competency under the new standard—that is a 483 observation. Not a warning. Not a grace period. A finding.

QMSR Is Now Enforceable — Where Do You Stand? Most manufacturers underestimated the documentation burden. Training records are the first place FDA investigators look under the new inspection program. Find out if yours hold up.

→ Get Your Free QMSR Training Compliance Assessment

Takes 10 minutes. Identifies your highest-risk gaps. No sales call required.

Understanding the Scope of Change

The QMSR is not a minor update to existing requirements. It fundamentally changes how the FDA approaches quality system oversight—and what investigators are authorized to examine during an inspection.

The FDA estimated the QMSR would generate annualized net cost savings of approximately $532 million at a 7 percent discount rate (Federal Register, February 2, 2024, Docket No. FDA-2021-N-0507), reflecting projected efficiency gains from global harmonization. Realizing those benefits, however, depends on manufacturers completing their compliance transitions.

Three changes define the new landscape:

• Incorporation by Reference: Rather than maintaining separate U.S.-specific requirements, FDA incorporated ISO 13485:2016 directly into 21 CFR Part 820. Requirements now reference their location in ISO 13485:2016.
• Expanded Inspection Authority: The QMSR gives FDA the authority to inspect management review records, quality audits, and supplier audit reports—areas that were previously protected from FDA review under the QSR.
• Risk-Based Approach: The QMSR requires manufacturers to identify and mitigate uncertainties across all quality management processes—going beyond traditional product-level risk management.

FDA-Specific Requirements That Go Beyond ISO 13485

ISO 13485 certification does not equal QMSR compliance. The FDA maintains several requirements that go beyond what ISO 13485:2016 alone addresses:

1. Device Labeling and Packaging Controls

QMSR requirements for labeling and packaging controls extend beyond ISO 13485’s Clause 7.5.1(e). Manufacturers must have documented procedures covering the integrity, inspection, storage, and operations for labeling and repackaging activities. Review your labeling SOPs against QMSR’s specific requirements—ISO 13485 certification alone does not satisfy this.

2. Medical Device Reporting (21 CFR Part 803)

While ISO 13485 requires complaint management, QMSR compliance includes adherence to 21 CFR Part 803 for Medical Device Reporting, with specific requirements for adverse event documentation and reporting timelines that ISO 13485 does not address.

3. Unique Device Identification (21 CFR Part 830)

The QMSR requires UDIs to be applied to all medical devices in compliance with 21 CFR Part 830, expanding on ISO 13485’s identification and traceability clauses.

4. Corrections and Removals (21 CFR Part 806)

The QMSR maintains FDA’s specific requirements for device corrections and recalls, with manufacturer obligations that extend beyond ISO 13485 provisions.

The New Inspection Program

With the QSIT withdrawn on February 2, 2026, FDA investigators are now operating under the revised Compliance Program for Inspection of Medical Device Manufacturers. Inspections are no longer bounded by the old QSIT subsystem structure. Investigators now have broader authority and a different set of focus areas—including management review records and supplier audit documentation that were previously off-limits.

For manufacturers with pending submissions: HDE or PMA applications received after February 2, 2026 must demonstrate compliance with the QMSR, not the QSR. Applications received before that date fall under the prior standard.

If You’re Not Fully Compliant: Immediate Priorities

At this stage, the goal is not to achieve full compliance before an audit notice arrives—it’s to demonstrate good-faith progress and address the highest-risk gaps first. FDA investigators generally distinguish between organizations that have a documented remediation plan underway and those that have made no effort.

1. Document your transition plan. A written roadmap showing what has been completed, what is in progress, and what remains—with target dates—demonstrates commitment even when implementation is incomplete.
2. Address high-risk documentation gaps first. Separate CAPA procedures into distinct corrective and preventive action processes. Update critical terminology in key SOPs from QSR to QMSR/ISO 13485 language. Ensure design control traceability documentation is complete. Prepare management review and supplier audit records for potential inspection.
3. Prepare response templates for FDA findings. Know your gaps before an investigator finds them. Documented remediation timelines, already in place, are far more credible than responses assembled after a 483 is issued.
4. Keep moving. The deadline passing does not end your compliance work—it increases the urgency. Organizations demonstrating active, documented progress will be in a materially better position than those that stopped when the deadline arrived.

Emergency Documentation Review: Where to Start

Focus your immediate documentation review on the procedures FDA is most likely to examine first:

• CAPA — separation of corrective and preventive action is a primary inspection focus under the new program
• Management review records — now subject to FDA inspection where they were not before
• Design controls and traceability documentation
• Complaint handling procedures aligned to MDR requirements
• Training records demonstrating personnel competency, awareness, and documented training as required by ISO 13485:2016 Section 6.2

The Training Documentation Gap

ISO 13485:2016 Section 6.2 requires documented competence, awareness, and training for all personnel whose work affects product quality. Under the QMSR, with management reviews and supplier audits now subject to FDA inspection, training documentation has become a broader concern than many manufacturers anticipated.

A particularly common gap: organizations where quality events—procedure updates, CAPA actions, design changes—do not automatically trigger training assignments. When documentation is manually managed across separate quality and training systems, it is easy for compliance to drift. Investigators can identify those gaps quickly.

Organizations using integrated Quality Management and Learning Management Systems gain a structural advantage here: quality events automatically generate training requirements, training records link directly to quality procedures, and compliance documentation can be demonstrated as a connected whole rather than assembled from disparate sources at inspection time.

Common Compliance Pitfalls

Assuming ISO 13485 certification equals QMSR compliance

It does not. ISO 13485 certification is an important foundation, but FDA-specific requirements—MDR, UDI, labeling controls, corrections and removals—must be addressed separately.

Underestimating the documentation update burden

Every procedure, work instruction, and form referencing QSR terminology requires updating. For established quality systems, this process typically takes 6–12 months. Organizations that deferred this work will need to prioritize ruthlessly and document their progress.

Stopping at the deadline

The QMSR deadline was the compliance date, not the finish line. FDA expected organizations to have begun this transition in February 2024. For those still working through it, the message is the same as it has been: demonstrate active, documented progress and keep moving.

Regulatory References

For compliance planning, manufacturers should reference:

• FDA Final Rule: Federal Register, February 2, 2024 (Docket No. FDA-2021-N-0507)
• ISO 13485:2016: Available through the ANSI IBR Portal (registration required)
• ISO 9000:2015 Clause 3: Terms and definitions (incorporated by reference)
• FDA Compliance Program for Inspection of Medical Device Manufacturers (effective February 2, 2026)
• 21 CFR Part 4: Combination product requirements (amended for QMSR alignment)

Moving Forward

The QMSR represents more than a regulatory update. It reflects the FDA’s commitment to global harmonization and a more integrated approach to quality oversight. Organizations that have completed their transition—or are actively working through it—are better positioned for international markets, more efficient under audit, and less exposed to enforcement action.

For companies still operating with disconnected quality and training systems, the QMSR’s expanded inspection scope—particularly around training documentation—creates both a compliance gap and a clear signal about where to invest.

Free Download: QMSR Training Compliance Checklist

Based on ISO 13485:2016 Section 6.2 and the FDA’s updated inspection framework, this checklist covers:

• Personnel competency documentation requirements
• CAPA separation (corrective vs. preventive) training records
• Management review and supplier audit training trails
• Design control traceability documentation
• How to demonstrate good-faith compliance progress to FDA investigators

→ Download the Checklist — Free

eLeaP provides integrated Quality Management and Learning Management Systems designed for life sciences companies navigating complex regulatory requirements. Our platform connects quality events directly to competency management—so training records are automatically maintained as procedures change, giving your organization the documentation continuity FDA investigators expect to see.