FDA QMSR Is Now in Effect: What Medical Device Manufacturers Need to Verify After February 2, 2026 | Jay Wiessner
Updated: 2 days ago
The FDA's Quality Management System Regulation (QMSR) became effective on February 2, 2026. For medical device manufacturers subject to 21 CFR Part 820, the priority has shifted from transition planning to verification: can the organization demonstrate that its Quality Management System (QMS) is operating effectively under the current FDA framework?
QMSR incorporates ISO 13485:2016 by reference while retaining FDA-specific requirements. That means manufacturers should not assume that updated procedures alone are enough. The system needs to be implemented in daily operations, supported by objective evidence, and ready for FDA inspection.
Key Takeaways
QMSR is now effective and ISO 13485:2016 is incorporated by reference into 21 CFR Part 820.
The focus should now be on verifying implementation and effectiveness, not simply completing transition documentation.
FDA investigators may review management review, internal quality audit, and supplier audit records under QMSR.
The FDA stopped using QSIT on February 2, 2026 and now uses the inspection process described in Compliance Program 7382.850.
ISO 13485 certification can support a strong QMS, but certification does not replace FDA compliance obligations or FDA inspection.
Why Post-Implementation Verification Matters Now
A procedure can be technically correct while the process it describes is inconsistently followed. That is why the post-implementation phase matters. Management should verify that employees understand current requirements, records support actual practice, quality decisions are documented appropriately, and weaknesses are being identified and corrected.
The most useful review is not a paperwork exercise. It tests whether the QMS is functioning across departments and whether the organization can produce evidence that required processes are controlled and effective.
For background on what the February 2, 2026 deadline actually changed, see ISO 13485 Compliance: FDA Deadline 2026. This article focuses on the next step: verifying the QMS now that QMSR is in effect.
What Medical Device Manufacturers Should Verify Under QMSR
1. Document Control and Current Procedures
Confirm that controlled procedures reflect current operations and that employees are using the correct versions. Obsolete instructions, conflicting forms, or procedures that no longer match actual practice can create avoidable inspection risk.
2. Training and Employee Competence
Training records should show more than attendance. The organization should be able to demonstrate that personnel performing quality-affecting work are competent for their assigned responsibilities and understand the procedures they are expected to follow.
3. Management Review
Management review should provide evidence that leadership is evaluating the performance and suitability of the QMS and making decisions when action is needed. Review the quality information presented to management, the decisions made, assigned actions, and whether those actions were completed.
4. Internal Quality Audits
Internal audits should evaluate whether the QMS is implemented and effective, not simply confirm that procedures exist. Review whether the audit program covers the necessary processes, identifies meaningful weaknesses, and results in timely follow-up when nonconformities are found.
Under QMSR, the previous FDA exemption that limited access to certain internal quality audit records is no longer maintained. Manufacturers should therefore make sure audit records are accurate, professional, and supported by objective evidence.
5. Supplier Qualification and Oversight
Review supplier qualification, monitoring, re-evaluation, purchasing controls, and supplier-related corrective actions. Supplier controls should reflect the significance of the purchased product or service and the risk it can create for device quality and regulatory compliance.
6. Risk Management
QMSR incorporates the ISO 13485:2016 framework, which gives risk management a central role in the medical device QMS. Verify that risk-related decisions are integrated into applicable processes and that risk controls are supported by current records and actual implementation.
7. Complaints, Nonconformities, and Corrective Action
Review whether complaints and nonconformities are evaluated appropriately, investigations are completed when required, causes are addressed, and corrective actions are verified for effectiveness. Recurring issues, overdue actions, or repeated symptoms can indicate that the QMS is not resolving underlying problems.
8. Design and Development Controls, Where Applicable
For organizations responsible for design and development, verify that design planning, inputs, outputs, reviews, verification, validation, transfer, and changes are controlled and supported by objective evidence. The goal is not to create new documentation for its own sake, but to confirm that applicable design controls are complete and functioning.
9. Quality Records and Traceability
Records should be complete, legible, retrievable, and consistent with the processes they support. Where traceability requirements apply, the organization should be able to follow the relevant product, material, process, or quality history without relying on informal knowledge.
10. FDA Inspection Readiness
On February 2, 2026, the FDA stopped using the Quality System Inspection Technique (QSIT) and began using the inspection process described in Compliance Program 7382.850. Manufacturers should prepare for current inspection expectations rather than relying on older QSIT-based assumptions.
Inspection readiness should include organized access to records, knowledgeable personnel, current procedures, and a clear understanding of how the QMS operates in practice.
Records FDA May Review That Were Previously Exempt
One of the most important practical changes for manufacturers is that FDA investigators may now review management review, quality audit, and supplier audit reports during QMSR inspections. The exemptions that existed under the former Quality System Regulation are not maintained in QMSR.
That does not mean companies should make internal audits less candid. It means audit and management-review records should be clear, factual, evidence-based, and followed by appropriate action when weaknesses are identified.
ISO 13485 Certification vs. FDA QMSR Compliance
ISO 13485 certification and FDA compliance remain separate. QMSR incorporates ISO 13485:2016 by reference, creating substantial alignment, but an ISO 13485 certificate does not exempt a manufacturer from FDA requirements or FDA inspection.
Organizations should understand which requirements come from FDA regulation, which come from ISO 13485 certification, and which come from customers, contracts, or other markets. A well-designed QMS can support more than one of these needs without treating them as identical.
Common Post-QMSR Weaknesses to Look For
Procedures were updated for QMSR, but daily operations still follow older practices.
Training records show completion but do not demonstrate competence.
Internal audits focus on paperwork and miss process effectiveness.
Management review records summarize data without documenting decisions or follow-up actions.
Supplier re-evaluations are outdated or do not reflect supplier risk.
Corrective actions are closed without confirming effectiveness.
Risk management is treated as a stand-alone file instead of being connected to relevant QMS processes.
Records are incomplete, inconsistent, or difficult to retrieve during an inspection.
Teams still prepare for FDA inspections using outdated QSIT assumptions.
How My ISO Consultants Can Help
A focused post-QMSR assessment can help determine whether transition work was actually implemented and where the QMS still has meaningful gaps. The goal should be to prioritize issues that affect compliance, inspection readiness, and system effectiveness rather than rewriting the entire QMS unnecessarily.
QMSR and ISO 13485 gap assessments.
Documentation and implementation reviews.
Internal auditing and audit-program support.
Management review readiness.
Supplier-control and corrective-action reviews.
Risk-management integration support.
FDA inspection-readiness preparation.
ISO 13485 certification-readiness support when certification is also a business objective.
Organizations that need an independent review of their current medical device quality system can use My ISO Consultants' ISO 13485 consulting services to identify practical gaps, strengthen implementation, and prepare for current regulatory and certification expectations.
Frequently Asked Questions
What will the FDA look at during a QMSR inspection?
The scope depends on the type and focus of the inspection, but manufacturers should be prepared to provide records and evidence demonstrating compliance with applicable QMSR requirements. The FDA's current inspection process is described in Compliance Program 7382.850.
Can the FDA review internal audit, supplier audit, and management review records now?
Yes. The QMSR does not retain the previous exemptions that prevented FDA review of certain management review, quality audit, and supplier audit reports. Manufacturers should expect those records to be available when they are relevant to the inspection.
Does ISO 13485 certification satisfy FDA QMSR requirements?
No. ISO 13485 certification can demonstrate third-party conformity to the standard, but FDA compliance is a separate regulatory obligation. Manufacturers must still meet applicable FDA requirements and remain subject to FDA oversight.
Do we need to rewrite our entire QMS now that QMSR is in effect?
Usually not. The better approach is to compare the current system with applicable QMSR requirements, verify that procedures match actual practice, identify unresolved gaps, and make targeted corrections. A full rewrite can create unnecessary disruption when many existing processes are already effective.
Conclusion
The February 2, 2026 QMSR effective date was not the end of the transition. It marked the point when manufacturers needed to operate under the current FDA quality-system framework. The most important question now is whether the QMS is actually working and whether the organization can demonstrate that through objective evidence.
If your organization wants an independent post-QMSR review, My ISO Consultants provides ISO 13485 consulting services for gap analysis, internal auditing, QMS improvement, certification readiness, and FDA inspection-readiness support.
Author: Jay Wiessner
