What Is 21 CFR 820

Content on WhatAnswers is provided "as is" for informational purposes. While we strive for accuracy, we make no guarantees. Content is AI-assisted and should not be used as professional advice.

Last updated: April 15, 2026

Quick Answer: 21 CFR 820 is the FDA's Quality System Regulation (QSR) established in 1997, requiring medical device manufacturers to follow strict design, testing, and documentation practices to ensure product safety and effectiveness.

Key Facts

21 CFR 820 became effective on June 1, 1997, replacing earlier Good Manufacturing Practice regulations
Applies to all manufacturers of Class I, II, and III medical devices sold in the U.S.
Requires documented quality management systems covering design, production, and post-market surveillance
FDA conducts unannounced inspections to audit compliance with 21 CFR 820
Non-compliance can result in warning letters, product recalls, or facility shutdowns

Overview

21 CFR Part 820, also known as the Quality System Regulation (QSR), is a set of U.S. Food and Drug Administration (FDA) requirements governing the design, manufacture, packaging, labeling, storage, installation, and servicing of medical devices. It ensures that medical devices are consistently produced and controlled according to defined quality standards to guarantee safety and effectiveness for patients.

The regulation applies to all domestic and foreign manufacturers that distribute medical devices in the United States, regardless of device class. Compliance is mandatory and enforced through FDA inspections, with non-compliant firms facing regulatory actions including fines, recalls, or import bans.

Scope: Covers all Class I, II, and III medical devices, from simple tongue depressors to complex implantable devices like pacemakers and artificial joints.
Effective Date: The current version of 21 CFR 820 became enforceable on June 1, 1997, modernizing earlier Good Manufacturing Practice (GMP) rules.
Quality Management: Requires manufacturers to establish a formal quality system with documented procedures, organizational structure, and responsibilities.
Design Controls: Mandates design validation and verification for all Class II and III devices to ensure they meet user needs and regulatory standards.
Recordkeeping: Firms must maintain records of device history, design, and quality audits for at least two years after product distribution, or longer for implants.

How It Works

21 CFR 820 outlines specific subsystems that manufacturers must implement and document. Each subsystem ensures traceability, consistency, and compliance throughout the device lifecycle, from concept to post-market monitoring.

Design Controls: Manufacturers must document design inputs, outputs, reviews, and verification to ensure devices meet user needs and regulatory requirements.
Document Controls: All procedures and specifications must be approved, reviewed, and updated, with version control and access restrictions to prevent unauthorized changes.
Purchasing Controls: Suppliers and contractors must be evaluated and approved to ensure incoming materials meet specified quality standards.
Production & Process Controls: Processes must be validated and monitored, especially for sterile or implantable devices requiring 100% inspection or testing.
Corrective & Preventive Action (CAPA): Firms must investigate non-conformances and implement actions to prevent recurrence of quality issues.
Device History Record (DHR): Each production batch must have a complete record linking device specifications, materials, and testing results for full traceability.

Comparison at a Glance

How 21 CFR 820 compares to international quality standards used in medical device regulation:

Standard	Region	Key Focus	Alignment with 21 CFR 820
21 CFR 820	United States	Quality System Regulation	Baseline U.S. regulatory requirement
ISO 13485:2016	Global	Quality management for medical devices	Highly aligned; often used to meet 21 CFR 820
MDD 93/42/EEC	Former EU directive	Medical device safety and performance	Partially aligned; replaced by MDR
EU MDR 2017/745	European Union	Stricter post-market surveillance	More rigorous than 21 CFR 820 in some areas
Health Canada SOR/98-282	Canada	Medical device regulations	Similar structure, harmonized with ISO 13485

While 21 CFR 820 remains the U.S. benchmark, global manufacturers often align with ISO 13485, which is recognized by the FDA as a pathway to compliance. The EU’s Medical Device Regulation (MDR) introduces more stringent post-market requirements than 21 CFR 820, reflecting evolving global standards.

Why It Matters

21 CFR 820 is critical for ensuring public safety and trust in medical devices. By enforcing rigorous quality systems, the FDA reduces the risk of defective or unsafe products reaching patients.

Patient Safety: Prevents device failures that could lead to injury or death, especially in life-sustaining devices like ventilators or defibrillators.
Regulatory Compliance: Non-compliance can result in Form FDA 483 observations, warning letters, or import alerts.
Market Access: Compliance is mandatory for selling devices in the U.S., affecting global supply chains and manufacturing strategies.
Legal Protection: Adhering to 21 CFR 820 can help manufacturers defend against product liability lawsuits.
Global Harmonization: Many countries accept ISO 13485 certification, which aligns closely with 21 CFR 820, easing international expansion.
Innovation Oversight: Design controls ensure new technologies are thoroughly tested before entering the market.

Ultimately, 21 CFR 820 balances innovation with accountability, ensuring that medical advancements are both safe and reliable for public use.