What are the key differences between 21 CFR 820 and ISO 13485?
Since February 2, 2026, 21 CFR Part 820 incorporates ISO 13485:2016 through the FDA Quality Management System Regulation. The frameworks are now closely aligned, but Part 820 retains additional FDA requirements and remains legally enforceable under U.S. law.
Answer
ISO 13485 is an international voluntary consensus standard, while 21 CFR Part 820 is a binding U.S. federal regulation. Under the 2026 QMSR, Part 820 incorporates ISO 13485:2016 by reference and supplements it with FDA-specific requirements.
Important differences remain:
• Legal status: ISO 13485 is a standard; Part 820 is enforceable federal law.
• Certification: Independent bodies can certify an organization to ISO 13485. FDA does not issue QMSR or ISO certificates.
• Inspection: FDA retains authority to inspect establishments and take enforcement action regardless of certification status.
• Records: Part 820 includes FDA-specific requirements concerning complaint records, record availability, and confidentiality markings.
• Labeling and packaging: FDA retains supplementary controls for labeling and packaging operations.
• UDI: FDA adds Unique Device Identification requirements to applicable identification and traceability records.
• Terminology: FDA definitions and statutory concepts apply where they differ from or supplement ISO terminology.
U.S. compliance also extends beyond Part 820. Manufacturers may need to comply with Medical Device Reporting, corrections and removals, registration and listing, premarket submissions, UDI, and product-specific controls under other CFR parts.
An ISO 13485 system provides the central architecture for QMSR compliance, but manufacturers should conduct a documented gap assessment against Part 820 and all other applicable FDA requirements. A valid certificate alone is not evidence that every U.S. regulatory obligation has been satisfied.
Trust Our Expert Answers?