Welcome to Assurentry! New FDA compliance features available.
Skip to main content

Medical Device FDA Compliance

Navigate device classification, 510(k) submissions, establishment registration, UDI requirements, and Quality Management System Regulation (QMSR) compliance. Your comprehensive guide to bringing medical devices to the US market.

Trusted by 2,800+ companies in 160+ countries

QMSR took effect February 2, 2026

Is your quality management system aligned with ISO 13485:2016? The Quality Management System Regulation (QMSR) replaced the legacy QSR under 21 CFR Part 820 (as amended). All device manufacturers must now comply. Contact us for a compliance assessment.

Understanding Medical Device Regulations

Medical devices in the United States are regulated by FDA under the Federal Food, Drug, and Cosmetic Act. The regulatory framework is risk-based, with devices classified into three classes (I, II, III) based on the level of control necessary to ensure safety and effectiveness.

Before marketing a medical device in the US, manufacturers must: determine the appropriate classification for their device, complete the required premarket submission (510(k), PMA, or De Novo), register their establishment with FDA, list their devices, and comply with the Quality Management System Regulation (QMSR) requirements under 21 CFR Part 820 (as amended). Our 510(k) clearance guide walks through the premarket notification process in detail.

FDA's Center for Devices and Radiological Health (CDRH) oversees medical device regulation and conducts regular inspections of manufacturing facilities. Non-compliance can result in warning letters, consent decrees, seizures, and criminal prosecution.

The medical device regulatory landscape has undergone a major shift: as of February 2, 2026, the Quality Management System Regulation (QMSR) replaced the legacy QSR, aligning FDA requirements with ISO 13485:2016. Device manufacturers must now comply with the updated QMSR framework, alongside evolving UDI implementation and increased focus on cybersecurity for connected devices.

Need Help?

Our experts can guide you through device compliance.

Key Compliance Requirements

Medical device companies must meet these fundamental requirements to legally market devices in the US.

Device Classification

Determine your device class (I, II, or III) which determines regulatory pathway

Before marketing

Establishment Registration

All device establishments must register with FDA annually

Oct 1 - Dec 31 annually

Device Listing

All devices must be listed with FDA

Before marketing; update biannually

Premarket Submission

510(k), PMA, or De Novo depending on device class

Before marketing

Device Classification

FDA classifies medical devices into three classes based on risk level. Classification determines your regulatory pathway. Use our Device Product Finder to identify your device's product code and classification, or the Predicate Finder to locate substantially equivalent devices for your 510(k).

Class ILow Risk
Controls: General Controls
Examples: Bandages, tongue depressors, exam gloves
Premarket: Most exempt from 510(k)
% of all devices0%
Class IIModerate Risk
Controls: General + Special Controls
Examples: X-ray machines, powered wheelchairs, pregnancy tests
Premarket: 510(k) required
% of all devices0%
Class IIIHigh Risk
Controls: General Controls + PMA
Examples: Heart valves, implantable pacemakers, breast implants
Premarket: PMA required
% of all devices0%

Quality Management System Regulation (QMSR)

Effective February 2, 2026, the QMSR replaced the legacy QSR under 21 CFR Part 820 (as amended), aligning FDA requirements with ISO 13485:2016. All device manufacturers must now comply with the updated regulation.

All manufacturers must comply with QMSR regardless of device class. The regulation incorporates ISO 13485:2016 by reference while retaining FDA-specific requirements for design controls, complaint handling, and purchasing controls.

Key QMSR Elements

Management responsibility and quality policy
Design controls and design history file (FDA-specific retention)
Document and record controls (ISO 13485:2016 aligned)
Purchasing and supplier controls
Production and process controls
Acceptance activities and inspection
Corrective and preventive actions (CAPA)
Labeling and packaging controls
Handling, storage, distribution, and installation
Complaint handling and MDR reporting

Frequently Asked Questions

Get answers to common questions about medical device FDA compliance.

How do I determine my device classification?

FDA classifies medical devices into three classes based on risk. Start by identifying the product code and classification panel using FDA's product classification database. Class I devices are low risk with general controls. Class II devices require special controls and typically a 510(k). Class III devices are high risk and require Premarket Approval (PMA). If your device has no predicate, the De Novo pathway may apply.

What is a 510(k) submission?

A 510(k) is a premarket notification submitted to FDA to demonstrate that a device is substantially equivalent to a legally marketed predicate device. The submission must include: device description, predicate comparison, performance data, labeling, and biocompatibility data (if applicable). FDA review takes approximately 90 days. A cleared 510(k) allows you to market the device.

Do I need to register my establishment?

Yes, all establishments that are involved in the production and distribution of medical devices intended for use in the United States must register with FDA. This includes manufacturers, contract manufacturers, repackagers/relabelers, specification developers, and initial distributors of imported devices. Registration must be renewed annually between October 1 and December 31.

What is UDI and does it apply to my device?

The Unique Device Identification (UDI) system requires most medical devices to bear a unique identifier on their label and packages. The UDI consists of a device identifier (DI) and a production identifier (PI). UDI data must be submitted to FDA's Global Unique Device Identification Database (GUDID). Implementation varies by device class, with Class III devices required first.

What are the Quality Management System Regulation (QMSR) requirements?

The QMSR (21 CFR Part 820, as amended) replaced the legacy QSR effective February 2, 2026, aligning FDA requirements with ISO 13485:2016. Key elements include: management responsibility, design controls, document controls, purchasing controls, production controls, CAPA, and complaint handling. QMSR incorporates ISO 13485:2016 by reference while retaining FDA-specific additions. All manufacturers must comply regardless of device class.

What is Medical Device Reporting (MDR)?

MDR requires manufacturers, importers, and user facilities to report certain device-related adverse events to FDA. Manufacturers must report: deaths and serious injuries within 30 days, malfunctions that could cause death or serious injury within 30 days, and 5-day reports for events requiring remedial action. Failure to report is a serious violation that can result in warning letters and penalties.

Do foreign manufacturers need to register with FDA?

Yes, foreign manufacturers exporting medical devices to the US must register their establishment with FDA. They must also designate a US Agent who serves as FDA's point of contact. Additionally, the initial importer must be registered as well. Foreign manufacturers must comply with QSR requirements and are subject to FDA inspections.

What is the De Novo classification pathway?

The De Novo pathway is for novel medical devices that are low-to-moderate risk but have no predicate device, making them ineligible for 510(k). If granted, the device is classified into Class I or II and can serve as a predicate for future 510(k) submissions. The De Novo process requires more clinical/performance data than a 510(k) but less than a PMA.

Device Lifecycle Compliance

Medical device compliance extends beyond initial clearance. These ongoing obligations ensure your devices remain compliant throughout their entire market lifecycle.

UDI/GUDID

Unique Device Identification

Most medical devices must bear a Unique Device Identifier on labels and packages. UDI data must be submitted to FDA's Global Unique Device Identification Database (GUDID). Implementation timelines vary by device class.

  • Device Identifier (DI) + Production Identifier (PI)
  • GUDID database submission required
  • Label and package marking
  • Compliance dates vary by device class
Learn more

eMDR

Electronic Medical Device Reporting

Manufacturers must electronically report device-related deaths, serious injuries, and malfunctions to FDA. Reports must be filed within 30 days (or 5 days for events requiring remedial action).

  • Deaths and serious injuries within 30 days
  • Malfunctions within 30 days
  • 5-day reports for remedial action events
  • Electronic submission via FDA eSubmitter
Learn more

Product Listing

Annual Device Listing via FURLS

All medical devices marketed in the US must be listed with FDA through the Unified Registration and Listing System (FURLS). Listings must be updated biannually and when new devices are introduced.

  • List all devices through FURLS
  • Update listings biannually
  • Include product codes and proprietary names
  • Required alongside establishment registration
Learn more

Ready to Bring Your Device to Market?

Get personalized guidance from our FDA compliance experts. We'll help you navigate the device regulatory pathway.