The biggest changes between the QS regulation and QMSR
The QMSR places much more emphasis on risk-based decision-making, which is aligned to the approach in ISO 13485, and may be a new concept to those with previous experience of the FDA’s QS regulation only.
The specific amendments in the QMSR are made to: document controls, labeling and packaging control, records, and servicing.
Control of records (Sec 820.35)
The QMSR has made changes regarding the control of records, to enforce that manufacturers must meet the requirements in accordance with ISO 13485 Clause 4.2.5, as well as further requirements from the FDA.
Handling complaints will be dealt with in accordance with ISO 13485 Clause 8.2. Notably, if a complaint cannot be investigated due to lack of information, the manufacturer is required to document this and provide evidence that efforts have been made to gain the information. In addition, the situation where a complaint investigation must be initiated, and records that must be retained pertaining to this, have been updated.
It is also now required that the Unique Device Identifier (UDI) is documented for each medical device, or batch of.
Device labeling and packaging controls (Sec 820.45)
Manufacturers must inspect their labeling and packaging for accuracy, documenting in accordance with ISO 13485 Clause 4.2.5. It specifically highlights that this inspection must be documented and occur “before use to assure that all devices have the correct labeling and packaging.” This addresses a trend identified by the FDA, where automatic readers have not been able to identify these types of errors. Having a designated individual examine, at minimum, a representative sample of those checked by an automatic reader, should address this issue.
Management audit exceptions (Sec 820.180(c))
Management reviews, quality audits and supplier audits were previously excluded from inspections. By following the example of ISO 13485, and removing this exception, it could be argued that the impact of the QMSR is minimal – content which makes up management review (e.g., NCRs, audit findings) were already in scope of inspection.