QEBX Insights and Updates

A Strategic Guide to the FDA's New Quality Management System Regulation (QMSR)

Tue, 02 Dec 2025 03:31:06 GMT

Beyond the Deadline...

On February 2, 2024, the U.S. Food and Drug Administration (FDA) published its final rule to amend 21 CFR Part 820, officially replacing the long-standing Quality System Regulation (QSR). The new rule, titled the Quality Management System Regulation (QMSR), becomes fully effective and enforceable on February 2, 2026.

While this two-year transition period may seem adequate, industry analysis suggests a full QMS transition is an 18- to 24-month project. This timeline means that organizations that have not yet begun strategic planning are already at risk of falling behind.

This article provides an overview of the three most significant strategic changes medical device manufacturers and their suppliers need to understand.

1. The "ISO 13485-Plus" Framework: Compliance Beyond Certification

The core of the new QMSR is the "incorporation by reference" (IBR) of the globally recognized international standard, ISO 13485:2016 . This action is intended to harmonize U.S. regulations with the framework used by most o ther major regulatory authorities.

However, a critical point of failure will be the assumption that an existing ISO 13485:2016 certification equals full QMSR compliance. The FDA has explicitly stated that an ISO 13485 certificate from a third-party registrar will not exempt a manufacturer from FDA inspection.

The QMSR is an "ISO 13485-plus" framework, establishing additional, specific requirements to ensure consistency with the Federal Food, Drug, and Cosmetic (FD&C) Act.

Key "FDA-Plus" additions include:

§ 820.10 (Requirements for a QMS)
This new "linchpin" section serves as a legal bridge. It explicitly requires the QMS to ensure compliance with all other applicable FDA requirements, including 21 CFR Part 803 (Medical Device Reporting), Part 806 (Corrections and Removals), Part 821 (Medical Device Tracking), and Part 830 (Unique Device Identification).
§ 820.35 (Control of Records)
This section adds specific requirements on top of what is required by ISO 13485. It mandates specific records related to complaint handling (linking to Part 803), servicing activities, UDI documentation, and records deemed confidential.
§ 820.45 (Device Labeling and Packaging Control)
The FDA determined that the general requirements in ISO 13485 were not specific enough to prevent common labeling failures. Therefore, the QMSR retains the highly prescriptive QSR rules requiring documented procedures to examine all labeling for accuracy and to design operations that prevent mix-ups.

2. A New Lexicon: The End of DHF, DMR, and DHR

The QMSR final rule officially eliminates the U.S.-specific documentation terminology that has defined device manufacturing for decades. This change requires manufacturers to "translate" their documentation systems to the new ISO lexicon.

Design History File (DHF)
(from old § 820.30) is replaced by the Design and Development File (DDF) (ISO 13485, Clause 7.3.10).
Device Master Record (DMR)
(from old § 820.181) is replaced by the Medical Device File (MDF) (ISO 13485, Clause 4.2.3).
Device History Record (DHR)
(from old § 820.184) is functionally replaced by ISO's requirements for Production and Batch Records (e.g., Clauses 7.5.1, 7.5.8).

This transition should be viewed as an opportunity to re-architect document control systems. The new ISO structure (DDF-informs-MDF) is well-suited to modern eQMS and PLM systems, enabling a "single source of truth" that can reduce redundancy and the risk of using obsolete documents.

3. A New Era of Transparency: The Elimination of Record Exemptions

Perhaps the most operationally disruptive change in the QMSR is the elimination of the record exemptions previously codified in QSR § 820.180(c).

Under the old QSR, FDA investigators were explicitly prohibited from reviewing the reports and findings from:

Management Reviews
Internal Quality Audits
Supplier Audits

Under the new QMSR, these exemptions are eliminated. The FDA now has the full authority to request and review all of these records during a routine inspection.

This change fundamentally alters the regulatory landscape. It creates a "smoking gun" scenario where, for example, an FDA inspector at a manufacturer's facility can request and read the complete supplier audit report for a critical contractor, including all detailed findings of non-compliance. This creates a new and significant regulatory liability for both the manufacturer and the supplier.

Recommended Strategic Actions

Given the 18 to 24 month timeline for a full QMS transition, waiting is not a viable strategy. Organizations should begin immediate planning.

Conduct a 3-Way Gap Analysis:
The analysis must compare your current QSR against not only ISO 13485:2016 but also the specific "FDA-Plus" requirements in § 820.10, § 820.35, and § 820.45.
Revise Internal Oversight Procedures:
Procedures for internal audits, management reviews, and supplier audits must be revised. Personnel should be trained on how to write reports that are candid, objective, and actionable—while remaining factual and concise—now that they are subject to FDA inspection.
Review and Renegotiate Quality Agreements:
In this new, transparent environment, Quality Agreements (QAs) are a critical legal tool. This is especially true for critical suppliers, such as sterilization contractors, who now face indirect liability from their clients' audits. It is advisable to review QAs to contractually manage this new, transparent audit process.

Navigating Your QMSR Transition

The transition to QMSR is a significant undertaking, requiring deep expertise in both ISO 13485 and the FDA's specific regulatory requirements. This is especially true when integrating risk management throughout the QMS, rewriting procedures, and preparing for the new era of inspectional transparency.

Quantum EBX specializes in building and supporting robust Quality Management Systems for medical device manufacturers and sterilization facilities. Our services are designed to address these exact challenges, including:

QMS Gap Analysis & Implementation
We can conduct a comprehensive 3-way gap analysis (QSR vs. ISO 13485 vs. "FDA-Plus") and help you design, document, and implement a fully compliant QMSR.
Procedure Development
Our team can assist in rewriting and developing the new SOPs, work instructions, and documentation required by the new lexicon (DDF, MDF) and risk-based approach.
Audit & Compliance Support
We can help you establish and manage internal audit programs and provide support for readiness reviews, ensuring your team is prepared for the new inspectional process.
Sterilization & Supplier QMS
For contract sterilizers and critical suppliers, we provide specialized services to ensure your own QMS is compliant and to help you prepare for the increased scrutiny from your clients' new supplier audit requirements.

This change is an opportunity to modernize your quality system for global compliance. If you are beginning your transition planning or require expert support to ensure a seamless implementation, contact us to learn how we can help.

Sterigenics Expands with New X-Ray Facility

dpaulsen@quantumebx.com (Deanna Paulsen) — Wed, 11 Jun 2025 02:29:13 GMT

Exciting News in Sterilization

Here at Quantum EBX, we're always excited to see advancements and growth in the sterilization industry. That's why the recent announcement from Sterigenics about their new X-ray sterilization facility in Haw River, North Carolina, caught our eye.

This development, expected to be operational in late 2025, is great news for medical device manufacturers, pharmaceutical companies, and other industries in the Southeast US. The new X-ray facility will be located next to their existing gamma facility, expanding their capabilities and helping to meet the increasing demand for sterilization services in the region.

Why is it important?

X-ray sterilization is a powerful and effective method for ensuring product safety. It's particularly well-suited for a variety of products, including:

Medical devices
Pharmaceuticals
Biopharmaceutical single-use-systems
Commercial applications

Sterigenics highlights that their new facility will feature innovative technology designed for high-throughput processing and flexibility, accommodating a wide range of product configurations.

The Quantum EBX Advantage

While we congratulate Sterigenics on their expansion, it's also a good time to remember the specialized expertise Quantum EBX offers in the realm of e-beam and X-ray sterilization. As a consulting company, we focus on providing comprehensive services to ensure your sterilization processes are efficient, compliant, and tailored to your specific needs.

Whether you are considering X-ray sterilization for the first time, or looking to optimize your existing processes, Quantum EBX can help. Our services include:

QMS Design & Implementation:
We develop robust Quality Management Systems that meet stringent FDA QSR and ISO 13485 requirements. This includes creating quality manuals, procedure development (SOPs), work instructions, and establishing document control.

Product Validation:
Quantum EBX can guide you through the entire product validation process for e-beam and X-ray sterilization. This critical step involves defining product and packaging specifications, bioburden determination, dose mapping, and determining minimum sterilization and maximum allowable doses.

Dosimetry System Services: Precise dose measurement is key to effective sterilization. We help with dosimetry system selection, implementation, qualification, and procedure development. We also offer calibration services and can assess your current dosimetry system for accuracy and reliability.

Regulatory Compliance & Auditing:
Navigating the regulatory landscape can be complex. To help you through, we provide gap analyses, support for internal audit programs, and assistance with certification processes.

The expansion of X-ray sterilization capacity is a positive trend for the industry, offering more options and flexibility for manufacturers. At Quantum EBX, we're here to help you leverage these technologies effectively and ensure your products meet the highest standards of safety and quality.

Thinking about e-beam or X-ray sterilization for your products?

Contact Quantum EBX today to learn how our expert consulting services can benefit your business!

Auditor's Perspective: ISO 13485 QMS Requirements

Fri, 03 May 2024 01:39:04 GMT

The Framework for a Successful Operation:
ISO 13485: Section 4, Quality Management System

In the meticulous world of medical device manufacturing, ensuring quality isn’t just a recommendation – it’s an absolute necessity. When it comes to maintaining ISO 13485 certification, critical elements within the standards can be neglected and eventually require corrective action. When left unchecked, small issues can pile into a mountain of workload – and well, we like to honor our weekends!

We’re diving into Section 4 of ISO 13485, highlighting points that tend to get overlooked in a Quality Management System. This is the backbone of your business and is essential to the certification, reputation, and ultimately, success of your business.

Section 4: Quality Management System

Your Quality Management System (QMS) serves as the framework for your business, designed to ensure consistency and standardization for meeting customer and regulatory expectations. In best practice, the QMS effectively eliminates process redundancies, performance gaps, and waste of resources. World class organizations have world class quality management systems, and it truly shows.

From My Experience :
The best quality management systems I’ve seen come from organizations that live and breathe the standards they’ve put together.

A well-designed QMS meets all of the following essential points:

Customer and Regulatory Requirements

A QMS ensures that your business process is effectively implemented to overcome any errors or obstacles that may hinder quality control standards and/or target deliveries. This allows your company to establish a reliable reputation, boosting customer satisfaction and loyalty.

Operational Efficiency

The QMS is the framework for building clear and consistent work instructions that ensure product requirements are met while minimizing process errors, bottlenecks, or redundancies. A well designed QMS should reduce resource waste, such as cost, time, or raw materials.

Continuous Improvement

An effective QMS allows you to create a structured approach to monitor and evaluate organization processes, methods, and practices. As such, you can identify necessary changes or areas of improvement and implement corrective/preventive actions to enhance your processes. The QMS empowers your business to continually optimize your workflow, decreasing waste and process variations.

Risk Mitigation
A QMS is crucial to the management of product quality, employee safety, and regulatory compliance. It serves as a roadmap that clearly establishes processes and contingencies intended to identify and prevent costly mistakes, reduce liability and customer dissatisfaction, and maintain adherence to regulatory requirements.

Below are notably common non-conformities in regard to ISO 13485 - Section 4:

Section 4.1: Quality Management System - General Requirements

Lack of application of risk management in all processes of the organization.
Calibration frequency, preventive maintenance frequency, and workforce training are often overlooked when it comes to risk management. However these are QMS processes that must be included in risk management such as FMEA (failure mode and effects analysis). Having a clear risk management system eliminates issues that could have been prevented with a proper plan in place. Don’t allow any room for error that can cause a possible recall. Trust us, those are a nightmare.
Poor process diagram not describing the inputs and outputs of the organization’s processes.
A good process diagram should effectively communicate the structure and sequence of an organization’s workflow and interdependencies. Put time into tailoring your process flow diagram to the critical and supportive processes of your organization. You want to make sure that every level of your process is included in your diagram. A process flow diagram that remains vague creates plenty of room for costly errors in the long run.

From My Experience :
Many of the companies I’ve audited simply used a copied and pasted image of the example process diagram from Annex B in the ISO 13485 Standard. That’s an instant red flag.

Section 4.2: Documentation Practices

Poor justification for non-applicable processes as per ISO 13485.
If a clause in ISO 13485 does not pertain to your business structure, do not merely state that it is not applicable. Make sure you are clear in the justification as to why it is not applicable. A lack of explanation can be interpreted as poor understanding of ISO 13485.
No requirements for the review and update of controlled documents.
Make sure your control of documents clearly states the frequency of review and updates of procedures, work instructions and forms. It’s as simple as creating a schedule and a master list that can be tracked and updated as you implement new or revised QMS documents.
No controls for external documents such as equipment manuals and equipment diagrams.
Ensure that all external origin documents necessary to the operation and maintenance of equipment are also controlled. Create a system that lists each document for easy tracking and access.
No requirements established for the retention period of obsolete documents.
Old document revisions need to be retained within a timeline that is in accordance with regulatory requirements and risk-based factors. Create a trackable system outlining how obsolete documentation is to be stored, archived, and eventually disposed of.
No requirements established for the protections of confidential health information contained in records.
Research the data privacy regulations in your region. This could be HIPPA (US), GDPR (EU), or local equivalents. Create a comprehensive protection plan and train your employees on their responsibilities to sensitive data security for both internal and external inputs (such as a customer complaint that discloses confidential patient information). Accordingly, your QMS must include safeguards for confidential health information.
Evidence of poor corrections made to controlled records.
All versions of standard operating procedures and work instructions must include a comprehensive change record. Each revision should be numbered, dated, and signed (noting review and approval) with a justification and description of change. If handwritten, proper corrections should include a strikethrough of the corrected text accompanied with the correct information, date and initials for authorization. Don’t cut corners and overwrite typos. Unauthorized changes can appear as falsification of records.
Poor legibility in controlled records.
This one is pretty simple. Be sure that all information on your documents is clear and easy to read – especially hand-written details. Illegibility and clerical errors can cause confusion that may lead to a mistake. A misread number can lead to a span of issues from a minor inconvenience to a product failing compliance, or worse, a product recall.

Maintaining an effective QMS is not just beneficial to your operation, but a crucial prerequisite for sustainable business success. Whether you’re running a small business or a corporate powerhouse, active quality management ensures long-term viability and growth. Your high attention to detail will be rewarded tenfold in the long term with minimized margin of error and maximized efficacy.

Thinking about e-beam or X-ray sterilization for your products?

Contact Quantum EBX today to learn how our expert consulting services can benefit your business!