QSR to QMSR: What Changed?

FDA Inspections Under QMSR: What Investigators Will Check

With the FDA’s transition from the Quality System Regulation (QSR) to the Quality Management System Regulation (QMSR), many medical device manufacturers are asking how the change will affect FDA inspections.

The short answer is that FDA inspections will continue to focus on the same core quality system processes that have always been central to device regulation. However, the framework used to evaluate those processes will now align more closely with ISO 13485:2016, which forms the foundation of the QMSR.

For manufacturers preparing for upcoming inspections, the key issue is not how stringent inspections will be, but how investigators will evaluate quality systems within the ISO-aligned regulatory structure.

The inspection framework is evolving

Historically, FDA investigators conducted inspections based on the structure of the Quality System Regulation under 21 CFR Part 820. Inspections often followed a process-oriented approach, examining specific regulatory requirements such as CAPA, complaint handling, or production controls.

Under QMSR, the regulatory structure now reflects the ISO 13485 clause framework, which emphasizes the interaction of processes within a comprehensive quality management system.

This means investigators may increasingly evaluate how well quality system processes work together as part of an integrated system, rather than focusing only on individual procedures in isolation.

Core quality system processes will remain the focus

Despite the regulatory restructuring, the operational areas that FDA investigators review during inspections will remain familiar to most manufacturers.

These typically include corrective and preventive Action (CAPA), complaint handling and post-market feedback, design controls, production and process controls, supplier and purchasing controls, nonconforming product management, and document and record control.

Inspection experience consistently shows that deficiencies in these areas account for most FDA observations.

Under QMSR, investigators will continue to assess whether these processes are effectively implemented, properly documented, and consistently followed.

Greater emphasis on process integration

One important implication of the ISO-based framework is the increased focus on how quality system processes interact with one another.

For example, investigators may examine whether complaints trigger appropriate CAPA investigations, nonconforming product trends are evaluated through risk management processes, supplier issues are integrated into corrective action systems, and management reviews incorporate quality system performance data.

In other words, investigators may increasingly look for evidence that the quality system functions as a coordinated management system rather than a collection of independent procedures.

Risk management across the quality system

ISO 13485 places strong emphasis on risk-based decision making, and this perspective is reflected in the QMSR framework.

While formal risk management is typically associated with design controls and ISO 14971, the broader quality management system should demonstrate that risk considerations influence decisions related to supplier selection, process validation, complaint investigations, corrective actions, and post-market monitoring.

Manufacturers should be prepared to demonstrate how risk considerations inform quality system activities throughout the product lifecycle.

Documentation still matters

Although modern quality management emphasizes process performance, documentation remains a critical element of regulatory compliance.

During inspections, investigators will continue to review procedures and policies, quality records, investigation documentation, training records, management review records, and internal audit reports.

Documentation should clearly demonstrate that quality system processes are implemented as described and supported by objective evidence.

Common inspection pitfalls

Inspection findings across the medical device industry tend to concentrate in a relatively small number of quality system areas.

Recurring issues often include incomplete CAPA investigations, inadequate complaint evaluations, weak root cause analysis, ineffective corrective action verification, insufficient process validation documentation, and gaps in supplier oversight.

These challenges have historically appeared frequently in FDA inspections and will likely remain areas of focus under QMSR.

Preparing for inspections under QMSR

Manufacturers preparing for inspections under the new regulatory framework should consider several practical steps.

Align internal audits with ISO structure

Internal audit programs should evaluate quality system processes using the ISO 13485 framework while also ensuring that FDA-specific regulatory provisions are addressed.

Verify process integration

Organizations should confirm that quality system processes interact appropriately—for example, ensuring that complaint trends feed into CAPA systems and management review discussions.

Evaluate risk management integration

Risk considerations should be clearly documented within quality system activities beyond design controls.

Confirm documentation consistency

Quality system documentation should reflect current procedures and demonstrate consistent implementation across the organization.

The bottom line

The transition to QMSR does not fundamentally change what FDA investigators expect from medical device manufacturers.

Investigators will continue to focus on the effectiveness of core quality system processes and whether those processes ensure that medical devices are designed and manufactured in a safe and controlled manner.

What has changed is the framework used to evaluate those processes, which now reflects the structure and philosophy of ISO 13485.

For manufacturers, the most effective preparation strategy remains the same as it has always been:

Build quality systems that work in practice, not just on paper.

Organizations that maintain well-integrated, well-documented, and consistently implemented quality management systems will be best positioned to navigate FDA inspections under the QMSR framework.

Complaint Handling and Post-Market Surveillance Under QMSR

Complaint Handling and Post-Market Surveillance Under QMSRComplaint handling and post-market surveillance are critical elements of medical device quality systems. While design controls ensure devices are properly developed and manufactured, complaint handling ensures...

Design Controls in the ISO 13485 Framework

Supplier Quality in the QMSR EraWhat Changes Under QMSR Design controls have long been a central pillar of medical device regulation. Under the legacy Quality System Regulation (QSR), FDA established detailed requirements for design planning, verification, validation,...

CAPA Under QMSR

Supplier Quality in the QMSR EraThe Most Inspected Process in Medical Device Quality Systems Corrective and Preventive Action (CAPA) has long been one of the most scrutinized elements of medical device quality systems. Under the legacy Quality System Regulation (QSR),...

Supplier Quality in the QMSR Era

Supplier Quality in the QMSR EraWhy Supplier Controls Are Becoming a Strategic Risk Function Supplier quality management has long been one of the most misunderstood areas of medical device regulation. Under the legacy Quality System Regulation (QSR), many...

Risk Management Under QMSR

Why Risk Management Matters More than EverFor many medical device manufacturers operating under the legacy Quality System Regulation (QSR), risk management was often treated primarily as a design control activity. Risk analyses were typically performed during product...