Does FDA recognize ISO 13485?

FDA’s Quality Management System Regulation, or QMSR, amended 21 CFR Part 820 by incorporating ISO 13485:2016 by reference. This alignment makes ISO 13485 the central quality-system framework for medical-device manufacturers subject to the revised U.S. regulation.

FDA recognition does not mean that an ISO 13485 certificate is sufficient for U.S. compliance. Manufacturers must meet both the incorporated ISO requirements and the additional FDA provisions in Part 820. FDA-specific requirements address matters such as definitions, record access, complaint records, labeling and packaging controls, and Unique Device Identification.

Medical-device companies must also comply with relevant requirements outside Part 820, including:

• Establishment registration and device listing
• Premarket notification or approval
• Medical Device Reporting
• Corrections and removals
• Unique Device Identification
• Device-specific special controls
• Investigational-device and post-market requirements

An accredited certification body may audit an organization and issue an ISO 13485 certificate, but the FDA retains its inspection and enforcement authority. FDA does not issue ISO 13485 certificates, and certification does not prevent the agency from identifying regulatory violations.

The practical benefit is greater alignment between an ISO 13485-based system and U.S. quality requirements. Manufacturers should nevertheless maintain an FDA-specific regulatory matrix identifying every additional obligation applicable to their devices and establishment activities.