What the FDA QMSR actually changes for small manufacturers

As of February 2, 2026, the FDA's Quality Management System Regulation (QMSR) replaced the old Quality System Regulation. For a small manufacturer, the honest news is that this is less a rebuild than a remap. If your quality system already reflects ISO 13485:2016, most of what you need is reconciliation, not reinvention.

What actually changed

The QMSR incorporates ISO 13485:2016 into 21 CFR Part 820 by reference. In practical terms, the standard you may already work to is now the backbone of the FDA requirement, rather than a separate framework you maintained alongside Part 820. The long, prescriptive text of the former regulation is gone, and ISO 13485 supplies the quality management structure in its place.

What the FDA kept are the requirements that are specific to United States law and cannot be met by ISO 13485 alone. These include unique device identification and labeling under Parts 801 and 830, certain definitions aligned to the Federal Food, Drug, and Cosmetic Act, and the expectation that records remain available to FDA on inspection. The FDA also updated its inspection approach to match the ISO 13485 structure rather than the retired inspection technique built around the old regulation.

Certified is not the same as compliant

The most common misread we see is treating an ISO 13485:2016 certificate as automatic QMSR compliance. It is a strong head start, but it is not the finish line. The FDA-specific overlays still apply, your terminology has to reconcile cleanly between the standard and the regulation, and your records have to be organized so an investigator can follow them. A certificate says your system meets the standard. QMSR compliance also asks whether it meets the additions the FDA layered on top.

A practical starting checklist

For a lean team, the work is bounded and orderly. A sensible first pass looks like this:

• Confirm your quality system is built on ISO 13485:2016, not an earlier edition or a Part 820 clause map.
• Walk your quality manual and procedures for references to old Part 820 section numbers, and update them to the corresponding ISO 13485 clauses.
• Keep and clearly identify the FDA-specific overlays: UDI and labeling, complaint and servicing records, and records availability to FDA.
• Reconcile definitions so that terms carry the same meaning across your system and the FD&C Act.
• Prepare your team and your records for an inspection that follows the ISO 13485 structure.

None of this requires tearing down a functioning quality system. It requires reading your own documentation with fresh eyes and closing the gaps that the harmonization created.

Back to Insights