2025-09-05T14:57:16+00:00 govinfo, U. S. Government Publishing Office 2025-09-05T11:03:25-04:00 iText® Core 7.2.3 (production version) ©2000-2022 iText Group NV, Government Publishing Office govinfo, U. S. Government Publishing Office 2025-09-05T14:57:16Z 2025-09-05T11:03:25-04:00 2025-09-05T11:03:25-04:00 iText® Core 7.2.3 (production version) ©2000-2022 iText Group NV, Government Publishing Office uuid:09a294d5-5b46-2ef7-77e9-ea7ea5210777 uuid:9f26413b-146a-2942-5587-ea7ea5210777 application/pdf tetml={filename={D:\drim\repository\projects\drim_124_0\metadata\a\a\aa102d6432abc0ecabb8067bc8bd38ce\aa102d6432abc0ecabb8067bc8bd38ce.tet.xml} elements={annotations=false bookmarks=false destinations=false fields=false javascripts = false} } granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 814.126 In addition, a HUD may be adminis- tered only if such use has been ap- proved by an IRB. If, however, a physi- cian in an emergency situation deter- mines that approval from an IRB can- not be obtained in time to prevent seri- ous harm or death to a patient, a HUD may be administered without prior ap- proval by an IRB. In such an emer- gency situation, the physician shall, within 5 days after the use of the de- vice, provide written notification to the chairman of the IRB of such use. Such written notification shall include the identification of the patient in- volved, the date on which the device was used, and the reason for the use. (b) Withdrawal of IRB approval. A holder of an approved HDE shall notify FDA of any withdrawal of approval for the use of a HUD by a reviewing IRB within 5 working days after being noti- fied of the withdrawal of approval. [61 FR 33244, June 26, 1996, as amended at 63 FR 59221, Nov. 3, 1998; 82 FR 26349, June 7, 2017] § 814.126 Postapproval requirements and reports. (a) An HDE approved under this sub- part H shall be subject to the post- approval requirements and reports set forth under subpart E of this part, as applicable, with the exception of § 814.82(a)(7). In addition, medical de- vice reports submitted to FDA in com- pliance with the requirements of part 803 of this chapter shall also be sub- mitted to the IRB of record. (b) In addition to the reports identi- fied in paragraph (a) of this section, the holder of an approved HDE shall prepare and submit the following com- plete, accurate, and timely reports: (1) Periodic reports. An HDE applicant is required to submit reports in accord- ance with the approval order. Unless FDA specifies otherwise, any periodic report shall include: (i) An update of the information re- quired under §814.102(a) in a separately bound volume; (ii) An update of the information re- quired under §814.104(b)(2), (b)(3), and (b)(5); (iii) The number of devices that have been shipped or sold since initial mar- keting approval under this subpart H and, if the number shipped or sold ex- 170 21 CFR Ch. I (4–1–25 Edition) ceeds 8,000, an explanation and esti- mate of the number of devices used per patient. If a single device is used on multiple patients, the applicant shall submit an estimate of the number of patients treated or diagnosed using the device together with an explanation of the basis for the estimate; (iv) Information describing the appli- cant’s clinical experience with the de- vice since the HDE was initially ap- proved. This information shall include safety information that is known or reasonably should be known to the ap- plicant, medical device reports made under part 803 of this chapter, any data generated from the postmarketing studies, and information (whether pub- lished or unpublished) that is known or reasonably expected to be known by the applicant that may affect an eval- uation of the safety of the device or that may affect the statement of con- traindications, warnings, precautions, and adverse reactions in the device’s labeling; and (v) A summary of any changes made to the device in accordance with sup- plements submitted under §814.108. If information provided in the periodic reports, or any other information in the possession of FDA, gives the agen- cy reason to believe that a device raises public health concerns or that the criteria for exemption are no longer met, the agency may require the HDE holder to submit additional infor- mation to demonstrate continued com- pliance with the HDE requirements. (2) Other. An HDE holder shall main- tain records of the names and addresses of the facilities to which the HUD has been shipped, correspondence with re- viewing IRB’s, as well as any other in- formation requested by a reviewing IRB or FDA. Such records shall be maintained in accordance with the HDE approval order. [61 FR 33244, June 26, 1996, as amended at 63 FR 59221, Nov. 3, 1998; 71 FR 16228, Mar. 31, 2006; 82 FR 26349, June 7, 2017] PART 820—QUALITY SYSTEM REGULATION Sec. 820.1 Scope. Subpart A—General Provisions granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.1 820.3 Definitions. 820.5 Quality system. Subpart B—Quality System Requirements 820.20 Management responsibility. 820.22 Quality audit. 820.25 Personnel. Subpart C—Design Controls 820.30 Design controls. Subpart D—Document Controls 820.40 Document controls. Subpart E—Purchasing Controls 820.50 Purchasing controls. Subpart F—Identification and Traceability 820.60 Identification. 820.65 Traceability. Subpart G—Production and Process Controls 820.70 Production and process controls. 820.72 Inspection, measuring, and test equipment. 820.75 Process validation. Subpart H—Acceptance Activities 820.80 Receiving, in-process, and finished device acceptance. 820.86 Acceptance status. Subpart I—Nonconforming Product 820.90 Nonconforming product. Subpart J—Corrective and Preventive Action 820.100 Corrective and preventive action. Subpart K—Labeling and Packaging Control 820.120 Device labeling. 820.130 Device packaging. Subpart L—Handling, Storage, Distribution, and Installation 820.140 Handling. 820.150 Storage. 820.160 Distribution. 820.170 Installation. Subpart M—Records 820.180 General requirements. 820.181 Device master record. 820.184 Device history record. 820.186 Quality system record. 171 820.198 Complaint files. 820.200 Servicing. Subpart N—Servicing Subpart O—Statistical Techniques 820.250 Statistical techniques. AUTHORITY: 21 U.S.C. 351, 352, 360, 360c, 360d, 360e, 360h, 360i, 360j, 360l, 371, 374, 381, 383; 42 U.S.C. 216, 262, 263a, 264. SOURCE: 61 FR 52654, Oct. 7, 1996, unless otherwise noted. EFFECTIVE DATE NOTE: At 89 FR 7523, Feb. 2, 2024, part 820 was revised, effective Feb. 2, 2026. For the convenience of the user, the new part 820 follows the text of this part. Subpart A—General Provisions § 820.1 Scope. (a) Applicability. (1) Current good manufacturing practice (CGMP) re- quirements are set forth in this quality system regulation. The requirements in this part govern the methods used in, and the facilities and controls used for, the design, manufacture, pack- aging, labeling, storage, installation, and servicing of all finished devices in- tended for human use. The require- ments in this part are intended to en- sure that finished devices will be safe and effective and otherwise in compli- ance with the Federal Food, Drug, and Cosmetic Act (the act). This part es- tablishes basic requirements applicable to manufacturers of finished medical devices. If a manufacturer engages in only some operations subject to the re- quirements in this part, and not in oth- ers, that manufacturer need only com- ply with those requirements applicable to the operations in which it is en- gaged. With respect to class I devices, design controls apply only to those de- vices listed in § 820.30(a)(2). This regula- tion does not apply to manufacturers of components or parts of finished de- vices, but such manufacturers are en- couraged to use appropriate provisions of this regulation as guidance. Manu- facturers of blood and blood compo- nents used for transfusion or for fur- ther manufacturing are not subject to this part, but are subject to subchapter F of this chapter. Manufacturers of human cells, tissues, and cellular and granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.1 tissue-based products (HCT/Ps), as de- fined in §1271.3(d) of this chapter, that are medical devices (subject to pre- market review or notification, or ex- empt from notification, under an appli- cation submitted under the device pro- visions of the act or under a biological product license application under sec- tion 351 of the Public Health Service Act) are subject to this part and are also subject to the donor-eligibility procedures set forth in part 1271 sub- part C of this chapter and applicable current good tissue practice procedures in part 1271 subpart D of this chapter. In the event of a conflict between ap- plicable regulations in part 1271 and in other parts of this chapter, the regula- tion specifically applicable to the de- vice in question shall supersede the more general. (2) The provisions of this part shall be applicable to any finished device as defined in this part, intended for human use, that is manufactured, im- ported, or offered for import in any State or Territory of the United States, the District of Columbia, or the Commonwealth of Puerto Rico. (3) In this regulation the term ‘‘where appropriate’’ is used several times. When a requirement is qualified by ‘‘where appropriate,’’ it is deemed to be ‘‘appropriate’’ unless the manu- facturer can document justification otherwise. A requirement is ‘‘appro- priate’’ if nonimplementation could reasonably be expected to result in the product not meeting its specified re- quirements or the manufacturer not being able to carry out any necessary corrective action. (b) The quality system regulation in this part supplements regulations in other parts of this chapter except where explicitly stated otherwise. In the event of a conflict between applica- ble regulations in this part and in other parts of this chapter, the regula- tions specifically applicable to the de- vice in question shall supersede any other generally applicable require- ments. (c) Authority. Part 820 is established and issued under authority of sections 501, 502, 510, 513, 514, 515, 518, 519, 520, 522, 701, 704, 801, 803 of the act (21 U.S.C. 351, 352, 360, 360c, 360d, 360e, 360h, 360i, 360j, 360l, 371, 374, 381, 383). The failure 172 21 CFR Ch. I (4–1–25 Edition) to comply with any applicable provi- sion in this part renders a device adul- terated under section 501(h) of the act. Such a device, as well as any person re- sponsible for the failure to comply, is subject to regulatory action. (d) Foreign manufacturers. If a manu- facturer who offers devices for import into the United States refuses to per- mit or allow the completion of a Food and Drug Administration (FDA) inspec- tion of the foreign facility for the pur- pose of determining compliance with this part, it shall appear for purposes of section 801(a) of the act, that the methods used in, and the facilities and controls used for, the design, manufac- ture, packaging, labeling, storage, in- stallation, or servicing of any devices produced at such facility that are of- fered for import into the United States do not conform to the requirements of section 520(f) of the act and this part and that the devices manufactured at that facility are adulterated under sec- tion 501(h) of the act. (e) Exemptions or variances. (1) Any person who wishes to petition for an exemption or variance from any device quality system requirement is subject to the requirements of section 520(f)(2) of the Federal Food, Drug, and Cos- metic Act. Petitions for an exemption or variance shall be submitted accord- ing to the procedures set forth in §10.30 of this chapter, the FDA’s administra- tive procedures. For guidance on how to proceed for a request for a variance, contact Division of Regulatory Pro- grams 2, Office of Regulatory Pro- grams, Office of Product Evaluation and Quality, Center for Devices and Radiological Health, Food and Drug Administration, 10903 New Hampshire Ave., Bldg. 66, Rm. 1438, Silver Spring, MD 20993–0002. (2) FDA may initiate and grant a variance from any device quality sys- tem requirement when the agency de- termines that such variance is in the best interest of the public health. Such variance will remain in effect only so long as there remains a public health need for the device and the device granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.3 would not likely be made sufficiently available without the variance. [61 FR 52654, Oct. 7, 1996, as amended at 65 FR 17136, Mar. 31, 2000; 65 FR 66636, Nov. 7, 2000; 69 FR 29829, May 25, 2005; 72 FR 17399, Apr. 9, 2007; 75 FR 20915, Apr. 22, 2010; 80 FR 29906, May 22, 2015; 85 FR 18442, Apr. 2, 2020] § 820.3 Definitions. (a) Act means the Federal Food, Drug, and Cosmetic Act, as amended (secs. 201–903, 52 Stat. 1040 et seq., as amended (21 U.S.C. 321–394)). All defini- tions in section 201 of the act shall apply to the regulations in this part. (b) Complaint means any written, electronic, or oral communication that alleges deficiencies related to the iden- tity, quality, durability, reliability, safety, effectiveness, or performance of a device after it is released for dis- tribution. (c) Component means any raw mate- rial, substance, piece, part, software, firmware, labeling, or assembly which is intended to be included as part of the finished, packaged, and labeled device. (d) Control number means any distinc- tive symbols, such as a distinctive combination of letters or numbers, or both, from which the history of the manufacturing, packaging, labeling, and distribution of a unit, lot, or batch of finished devices can be determined. (e) Design history file (DHF) means a compilation of records which describes the design history of a finished device. (f) Design input means the physical and performance requirements of a de- vice that are used as a basis for device design. (g) Design output means the results of a design effort at each design phase and at the end of the total design effort. The finished design output is the basis for the device master record. The total finished design output consists of the device, its packaging and labeling, and the device master record. (h) Design review means a docu- mented, comprehensive, systematic ex- amination of a design to evaluate the adequacy of the design requirements, to evaluate the capability of the design to meet these requirements, and to identify problems. (i) Device history record (DHR) means a compilation of records containing the production history of a finished device. 173 (j) Device master record (DMR) means a compilation of records containing the procedures and specifications for a fin- ished device. (k) Establish means define, document (in writing or electronically), and im- plement. (l) Finished device means any device or accessory to any device that is suit- able for use or capable of functioning, whether or not it is packaged, labeled, or sterilized. (m) Lot or batch means one or more components or finished devices that consist of a single type, model, class, size, composition, or software version that are manufactured under essen- tially the same conditions and that are intended to have uniform characteris- tics and quality within specified limits. (n) Management with executive respon- sibility means those senior employees of a manufacturer who have the authority to establish or make changes to the manufacturer’s quality policy and quality system. (o) Manufacturer means any person who designs, manufactures, fabricates, assembles, or processes a finished de- vice. Manufacturer includes but is not limited to those who perform the func- tions of contract sterilization, installa- tion, relabeling, remanufacturing, re- packing, or specification development, and initial distributors of foreign enti- ties performing these functions. (p) Manufacturing material means any material or substance used in or used to facilitate the manufacturing proc- ess, a concomitant constituent, or a byproduct constituent produced during the manufacturing process, which is present in or on the finished device as a residue or impurity not by design or intent of the manufacturer. (q) Nonconformity means the non- fulfillment of a specified requirement. (r) Product means components, manu- facturing materials, in- process de- vices, finished devices, and returned devices. (s) Quality means the totality of fea- tures and characteristics that bear on the ability of a device to satisfy fit- ness-for-use, including safety and per- formance. granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.5 (t) Quality audit means a systematic, independent examination of a manufac- turer’s quality system that is per- formed at defined intervals and at suf- ficient frequency to determine whether both quality system activities and the results of such activities comply with quality system procedures, that these procedures are implemented effec- tively, and that these procedures are suitable to achieve quality system ob- jectives. (u) Quality policy means the overall intentions and direction of an organi- zation with respect to quality, as es- tablished by management with execu- tive responsibility. (v) Quality system means the organi- zational structure, responsibilities, procedures, processes, and resources for implementing quality management. (w) Remanufacturer means any person who processes, conditions, renovates, repackages, restores, or does any other act to a finished device that signifi- cantly changes the finished device’s performance or safety specifications, or intended use. (x) Rework means action taken on a nonconforming product so that it will fulfill the specified DMR requirements before it is released for distribution. (y) Specification means any require- ment with which a product, process, service, or other activity must con- form. (z) Validation means confirmation by examination and provision of objective evidence that the particular require- ments for a specific intended use can be consistently fulfilled. (1) Process validation means estab- lishing by objective evidence that a process consistently produces a result or product meeting its predetermined specifications. (2) Design validation means estab- lishing by objective evidence that de- vice specifications conform with user needs and intended use(s). (aa) Verification means confirmation by examination and provision of objec- tive evidence that specified require- ments have been fulfilled. (bb) Human cell, tissue, or cellular or tissue-based product (HCT/P) regulated as a device means an HCT/P as defined in §1271.3(d) of this chapter that does not 174 21 CFR Ch. I (4–1–25 Edition) meet the criteria in §1271.10(a) and that is also regulated as a device. (cc) Unique device identifier (UDI) means an identifier that adequately identifies a device through its distribu- tion and use by meeting the require- ments of §830.20 of this chapter. A unique device identifier is composed of: (1) A device identifier—a mandatory, fixed portion of a UDI that identifies the specific version or model of a de- vice and the labeler of that device; and (2) A production identifier—a condi- tional, variable portion of a UDI that identifies one or more of the following when included on the label of the de- vice: (i) The lot or batch within which a device was manufactured; (ii) The serial number of a specific device; (iii) The expiration date of a specific device; (iv) The date a specific device was manufactured. (v) For an HCT/P regulated as a de- vice, the distinct identification code required by §1271.290(c) of this chapter. (dd) Universal product code (UPC) means the product identifier used to identify an item sold at retail in the United States. [61 FR 52654, Oct. 7, 1996, as amended at 78 FR 58822, Sept. 24, 2013] § 820.5 Quality system. Each manufacturer shall establish and maintain a quality system that is appropriate for the specific medical de- vice(s) designed or manufactured, and that meets the requirements of this part. Subpart B—Quality System Requirements § 820.20 Management responsibility. (a) Quality policy. Management with executive responsibility shall establish its policy and objectives for, and com- mitment to, quality. Management with executive responsibility shall ensure that the quality policy is understood, implemented, and maintained at all levels of the organization. granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.30 (b) Organization. Each manufacturer shall establish and maintain an ade- quate organizational structure to en- sure that devices are designed and pro- duced in accordance with the require- ments of this part. (1) Responsibility and authority. Each manufacturer shall establish the appro- priate responsibility, authority, and interrelation of all personnel who man- age, perform, and assess work affecting quality, and provide the independence and authority necessary to perform these tasks. (2) Resources. Each manufacturer shall provide adequate resources, in- cluding the assignment of trained per- sonnel, for management, performance of work, and assessment activities, in- cluding internal quality audits, to meet the requirements of this part. (3) Management representative. Man- agement with executive responsibility shall appoint, and document such ap- pointment of, a member of manage- ment who, irrespective of other respon- sibilities, shall have established au- thority over and responsibility for: (i) Ensuring that quality system re- quirements are effectively established and effectively maintained in accord- ance with this part; and (ii) Reporting on the performance of the quality system to management with executive responsibility for re- view. (c) Management review. Management with executive responsibility shall re- view the suitability and effectiveness of the quality system at defined inter- vals and with sufficient frequency ac- cording to established procedures to ensure that the quality system satis- fies the requirements of this part and the manufacturer’s established quality policy and objectives. The dates and re- sults of quality system reviews shall be documented. (d) Quality planning. Each manufac- turer shall establish a quality plan which defines the quality practices, re- sources, and activities relevant to de- vices that are designed and manufac- tured. The manufacturer shall estab- lish how the requirements for quality will be met. (e) Quality system procedures. Each manufacturer shall establish quality system procedures and instructions. An 175 outline of the structure of the docu- mentation used in the quality system shall be established where appropriate. § 820.22 Quality audit. Each manufacturer shall establish procedures for quality audits and con- duct such audits to assure that the quality system is in compliance with the established quality system require- ments and to determine the effective- ness of the quality system. Quality au- dits shall be conducted by individuals who do not have direct responsibility for the matters being audited. Correc- tive action(s), including a reaudit of deficient matters, shall be taken when necessary. A report of the results of each quality audit, and reaudit(s) where taken, shall be made and such reports shall be reviewed by manage- ment having responsibility for the matters audited. The dates and results of quality audits and reaudits shall be documented. § 820.25 Personnel. (a) General. Each manufacturer shall have sufficient personnel with the nec- essary education, background, train- ing, and experience to assure that all activities required by this part are cor- rectly performed. (b) Training. Each manufacturer shall establish procedures for identifying training needs and ensure that all per- sonnel are trained to adequately per- form their assigned responsibilities. Training shall be documented. (1) As part of their training, per- sonnel shall be made aware of device defects which may occur from the im- proper performance of their specific jobs. (2) Personnel who perform verification and validation activities shall be made aware of defects and er- rors that may be encountered as part of their job functions. Subpart C—Design Controls § 820.30 Design controls. (a) General. (1) Each manufacturer of any class III or class II device, and the class I devices listed in paragraph (a)(2) of this section, shall establish and maintain procedures to control the de- sign of the device in order to ensure granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.30 that specified design requirements are met. (2) The following class I devices are subject to design controls: (i) Devices automated with computer software; and (ii) The devices listed in the fol- lowing chart. Section Device 868.6810 ........ Catheter, Tracheobronchial Suction. 878.4460 ........ Glove, Surgeon’s. 880.6760 ........ Restraint, Protective. 892.5650 ........ System, Applicator, Radionuclide, Manual. 892.5740 ........ Source, Radionuclide Teletherapy. (b) Design and development planning. Each manufacturer shall establish and maintain plans that describe or ref- erence the design and development ac- tivities and define responsibility for implementation. The plans shall iden- tify and describe the interfaces with different groups or activities that pro- vide, or result in, input to the design and development process. The plans shall be reviewed, updated, and ap- proved as design and development evolves. (c) Design input. Each manufacturer shall establish and maintain proce- dures to ensure that the design require- ments relating to a device are appro- priate and address the intended use of the device, including the needs of the user and patient. The procedures shall include a mechanism for addressing in- complete, ambiguous, or conflicting re- quirements. The design input require- ments shall be documented and shall be reviewed and approved by a designated individual(s). The approval, including the date and signature of the indi- vidual(s) approving the requirements, shall be documented. (d) Design output. Each manufacturer shall establish and maintain proce- dures for defining and documenting de- sign output in terms that allow an ade- quate evaluation of conformance to de- sign input requirements. Design output procedures shall contain or make ref- erence to acceptance criteria and shall ensure that those design outputs that are essential for the proper functioning of the device are identified. Design out- put shall be documented, reviewed, and approved before release. The approval, including the date and signature of the 176 21 CFR Ch. I (4–1–25 Edition) individual(s) approving the output, shall be documented. (e) Design review. Each manufacturer shall establish and maintain proce- dures to ensure that formal docu- mented reviews of the design results are planned and conducted at appro- priate stages of the device’s design de- velopment. The procedures shall ensure that participants at each design review include representatives of all functions concerned with the design stage being reviewed and an individual(s) who does not have direct responsibility for the design stage being reviewed, as well as any specialists needed. The results of a design review, including identification of the design, the date, and the indi- vidual(s) performing the review, shall be documented in the design history file (the DHF). (f) Design verification. Each manufac- turer shall establish and maintain pro- cedures for verifying the device design. Design verification shall confirm that the design output meets the design input requirements. The results of the design verification, including identi- fication of the design, method(s), the date, and the individual(s) performing the verification, shall be documented in the DHF. (g) Design validation. Each manufac- turer shall establish and maintain pro- cedures for validating the device de- sign. Design validation shall be per- formed under defined operating condi- tions on initial production units, lots, or batches, or their equivalents. Design validation shall ensure that devices conform to defined user needs and in- tended uses and shall include testing of production units under actual or simu- lated use conditions. Design validation shall include software validation and risk analysis, where appropriate. The results of the design validation, includ- ing identification of the design, meth- od(s), the date, and the individual(s) performing the validation, shall be doc- umented in the DHF. (h) Design transfer. Each manufac- turer shall establish and maintain pro- cedures to ensure that the device de- sign is correctly translated into pro- duction specifications. granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.60 (i) Design changes. Each manufac- turer shall establish and maintain pro- cedures for the identification, docu- mentation, validation or where appro- priate verification, review, and ap- proval of design changes before their implementation. (j) Design history file. Each manufac- turer shall establish and maintain a DHF for each type of device. The DHF shall contain or reference the records necessary to demonstrate that the de- sign was developed in accordance with the approved design plan and the re- quirements of this part. Subpart D—Document Controls § 820.40 Document controls. Each manufacturer shall establish and maintain procedures to control all documents that are required by this part. The procedures shall provide for the following: (a) Document approval and distribu- tion. Each manufacturer shall des- ignate an individual(s) to review for adequacy and approve prior to issuance all documents established to meet the requirements of this part. The ap- proval, including the date and signa- ture of the individual(s) approving the document, shall be documented. Docu- ments established to meet the require- ments of this part shall be available at all locations for which they are des- ignated, used, or otherwise necessary, and all obsolete documents shall be promptly removed from all points of use or otherwise prevented from unin- tended use. (b) Document changes. Changes to doc- uments shall be reviewed and approved by an individual(s) in the same func- tion or organization that performed the original review and approval, un- less specifically designated otherwise. Approved changes shall be commu- nicated to the appropriate personnel in a timely manner. Each manufacturer shall maintain records of changes to documents. Change records shall in- clude a description of the change, iden- tification of the affected documents, the signature of the approving indi- vidual(s), the approval date, and when the change becomes effective. 177 Subpart E—Purchasing Controls § 820.50 Purchasing controls. Each manufacturer shall establish and maintain procedures to ensure that all purchased or otherwise received product and services conform to speci- fied requirements. (a) Evaluation of suppliers, contractors, and consultants. Each manufacturer shall establish and maintain the re- quirements, including quality require- ments, that must be met by suppliers, contractors, and consultants. Each manufacturer shall: (1) Evaluate and select potential sup- pliers, contractors, and consultants on the basis of their ability to meet speci- fied requirements, including quality re- quirements. The evaluation shall be documented. (2) Define the type and extent of con- trol to be exercised over the product, services, suppliers, contractors, and consultants, based on the evaluation results. (3) Establish and maintain records of acceptable suppliers, contractors, and consultants. (b) Purchasing data. Each manufac- turer shall establish and maintain data that clearly describe or reference the specified requirements, including qual- ity requirements, for purchased or oth- erwise received product and services. Purchasing documents shall include, where possible, an agreement that the suppliers, contractors, and consultants agree to notify the manufacturer of changes in the product or service so that manufacturers may determine whether the changes may affect the quality of a finished device. Purchasing data shall be approved in accordance with §820.40. Subpart F—Identification and Traceability § 820.60 Identification. Each manufacturer shall establish and maintain procedures for identi- fying product during all stages of re- ceipt, production, distribution, and in- stallation to prevent mixups. granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.65 § 820.65 Traceability. Each manufacturer of a device that is intended for surgical implant into the body or to support or sustain life and whose failure to perform when properly used in accordance with instructions for use provided in the labeling can be reasonably expected to result in a sig- nificant injury to the user shall estab- lish and maintain procedures for iden- tifying with a control number each unit, lot, or batch of finished devices and where appropriate components. The procedures shall facilitate correc- tive action. Such identification shall be documented in the DHR. Subpart G—Production and Process Controls § 820.70 Production and process con- trols. (a) General. Each manufacturer shall develop, conduct, control, and monitor production processes to ensure that a device conforms to its specifications. Where deviations from device specifica- tions could occur as a result of the manufacturing process, the manufac- turer shall establish and maintain process control procedures that de- scribe any process controls necessary to ensure conformance to specifica- tions. Where process controls are need- ed they shall include: (1) Documented instructions, stand- ard operating procedures (SOP’s), and methods that define and control the manner of production; (2) Monitoring and control of process parameters and component and device characteristics during production; (3) Compliance with specified ref- erence standards or codes; (4) The approval of processes and process equipment; and (5) Criteria for workmanship which shall be expressed in documented standards or by means of identified and approved representative samples. (b) Production and process changes. Each manufacturer shall establish and maintain procedures for changes to a specification, method, process, or pro- cedure. Such changes shall be verified or where appropriate validated accord- ing to §820.75, before implementation and these activities shall be docu- 178 21 CFR Ch. I (4–1–25 Edition) mented. Changes shall be approved in accordance with §820.40. (c) Environmental control. Where envi- ronmental conditions could reasonably be expected to have an adverse effect on product quality, the manufacturer shall establish and maintain proce- dures to adequately control these envi- ronmental conditions. Environmental control system(s) shall be periodically inspected to verify that the system, in- cluding necessary equipment, is ade- quate and functioning properly. These activities shall be documented and re- viewed. (d) Personnel. Each manufacturer shall establish and maintain require- ments for the health, cleanliness, per- sonal practices, and clothing of per- sonnel if contact between such per- sonnel and product or environment could reasonably be expected to have an adverse effect on product quality. The manufacturer shall ensure that maintenance and other personnel who are required to work temporarily under special environmental conditions are appropriately trained or supervised by a trained individual. (e) Contamination control. Each manu- facturer shall establish and maintain procedures to prevent contamination of equipment or product by substances that could reasonably be expected to have an adverse effect on product qual- ity. (f) Buildings. Buildings shall be of suitable design and contain sufficient space to perform necessary operations, prevent mixups, and assure orderly handling. (g) Equipment. Each manufacturer shall ensure that all equipment used in the manufacturing process meets speci- fied requirements and is appropriately designed, constructed, placed, and in- stalled to facilitate maintenance, ad- justment, cleaning, and use. (1) Maintenance schedule. Each manu- facturer shall establish and maintain schedules for the adjustment, cleaning, and other maintenance of equipment to ensure that manufacturing specifica- tions are met. Maintenance activities, including the date and individual(s) performing the maintenance activities, shall be documented. (2) Inspection. Each manufacturer shall conduct periodic inspections in granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.75 accordance with established procedures to ensure adherence to applicable equipment maintenance schedules. The inspections, including the date and in- dividual(s) conducting the inspections, shall be documented. (3) Adjustment. Each manufacturer shall ensure that any inherent limita- tions or allowable tolerances are visi- bly posted on or near equipment re- quiring periodic adjustments or are readily available to personnel per- forming these adjustments. (h) Manufacturing material. Where a manufacturing material could reason- ably be expected to have an adverse ef- fect on product quality, the manufac- turer shall establish and maintain pro- cedures for the use and removal of such manufacturing material to ensure that it is removed or limited to an amount that does not adversely affect the de- vice’s quality. The removal or reduc- tion of such manufacturing material shall be documented. (i) Automated processes. When com- puters or automated data processing systems are used as part of production or the quality system, the manufac- turer shall validate computer software for its intended use according to an es- tablished protocol. All software changes shall be validated before ap- proval and issuance. These validation activities and results shall be docu- mented. § 820.72 Inspection, measuring, and test equipment. (a) Control of inspection, measuring, and test equipment. Each manufacturer shall ensure that all inspection, meas- uring, and test equipment, including mechanical, automated, or electronic inspection and test equipment, is suit- able for its intended purposes and is ca- pable of producing valid results. Each manufacturer shall establish and main- tain procedures to ensure that equip- ment is routinely calibrated, inspected, checked, and maintained. The proce- dures shall include provisions for han- dling, preservation, and storage of equipment, so that its accuracy and fitness for use are maintained. These activities shall be documented. (b) Calibration. Calibration proce- dures shall include specific directions and limits for accuracy and precision. 179 When accuracy and precision limits are not met, there shall be provisions for remedial action to reestablish the lim- its and to evaluate whether there was any adverse effect on the device’s qual- ity. These activities shall be docu- mented. (1) Calibration standards. Calibration standards used for inspection, meas- uring, and test equipment shall be traceable to national or international standards. If national or international standards are not practical or avail- able, the manufacturer shall use an independent reproducible standard. If no applicable standard exists, the man- ufacturer shall establish and maintain an in-house standard. (2) Calibration records. The equipment identification, calibration dates, the individual performing each calibration, and the next calibration date shall be documented. These records shall be dis- played on or near each piece of equip- ment or shall be readily available to the personnel using such equipment and to the individuals responsible for calibrating the equipment. § 820.75 Process validation. (a) Where the results of a process cannot be fully verified by subsequent inspection and test, the process shall be validated with a high degree of as- surance and approved according to es- tablished procedures. The validation activities and results, including the date and signature of the individual(s) approving the validation and where ap- propriate the major equipment vali- dated, shall be documented. (b) Each manufacturer shall establish and maintain procedures for moni- toring and control of process param- eters for validated processes to ensure that the specified requirements con- tinue to be met. (1) Each manufacturer shall ensure that validated processes are performed by qualified individual(s). (2) For validated processes, the moni- toring and control methods and data, the date performed, and, where appro- priate, the individual(s) performing the process or the major equipment used shall be documented. (c) When changes or process devi- ations occur, the manufacturer shall review and evaluate the process and granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.80 perform revalidation where appro- priate. These activities shall be docu- mented. Subpart H—Acceptance Activities § 820.80 Receiving, in-process, and fin- ished device acceptance. (a) General. Each manufacturer shall establish and maintain procedures for acceptance activities. Acceptance ac- tivities include inspections, tests, or other verification activities. (b) Receiving acceptance activities. Each manufacturer shall establish and maintain procedures for acceptance of incoming product. Incoming product shall be inspected, tested, or otherwise verified as conforming to specified re- quirements. Acceptance or rejection shall be documented. (c) In-process acceptance activities. Each manufacturer shall establish and maintain acceptance procedures, where appropriate, to ensure that specified requirements for in-process product are met. Such procedures shall ensure that in-process product is controlled until the required inspection and tests or other verification activities have been completed, or necessary approvals are received, and are documented. (d) Final acceptance activities. Each manufacturer shall establish and main- tain procedures for finished device ac- ceptance to ensure that each produc- tion run, lot, or batch of finished de- vices meets acceptance criteria. Fin- ished devices shall be held in quar- antine or otherwise adequately con- trolled until released. Finished devices shall not be released for distribution until: (1) The activities required in the DMR are completed; (2) the associated data and docu- mentation is reviewed; (3) the release is authorized by the signature of a designated individual(s); and (4) the authorization is dated. (e) Acceptance records. Each manufac- turer shall document acceptance ac- tivities required by this part. These records shall include: (1) The acceptance activities per- formed; (2) the dates acceptance activities are performed; 180 21 CFR Ch. I (4–1–25 Edition) (3) the results; (4) the signature of the individual(s) conducting the acceptance activities; and (5) where appropriate the equipment used. These records shall be part of the DHR. § 820.86 Acceptance status. Each manufacturer shall identify by suitable means the acceptance status of product, to indicate the conformance or nonconformance of product with ac- ceptance criteria. The identification of acceptance status shall be maintained throughout manufacturing, packaging, labeling, installation, and servicing of the product to ensure that only prod- uct which has passed the required ac- ceptance activities is distributed, used, or installed. Subpart I—Nonconforming Product § 820.90 Nonconforming product. (a) Control of nonconforming product. Each manufacturer shall establish and maintain procedures to control product that does not conform to specified re- quirements. The procedures shall ad- dress the identification, documenta- tion, evaluation, segregation, and dis- position of nonconforming product. The evaluation of nonconformance shall include a determination of the need for an investigation and notifica- tion of the persons or organizations re- sponsible for the nonconformance. The evaluation and any investigation shall be documented. (b) Nonconformity review and disposi- tion. (1) Each manufacturer shall estab- lish and maintain procedures that de- fine the responsibility for review and the authority for the disposition of nonconforming product. The proce- dures shall set forth the review and dis- position process. Disposition of non- conforming product shall be docu- mented. Documentation shall include the justification for use of noncon- forming product and the signature of the individual(s) authorizing the use. (2) Each manufacturer shall establish and maintain procedures for rework, to include retesting and reevaluation of the nonconforming product after re- work, to ensure that the product meets granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.130 its current approved specifications. Re- work and reevaluation activities, in- cluding a determination of any adverse effect from the rework upon the prod- uct, shall be documented in the DHR. Subpart J—Corrective and Preventive Action § 820.100 Corrective and preventive ac- tion. (a) Each manufacturer shall establish and maintain procedures for imple- menting corrective and preventive ac- tion. The procedures shall include re- quirements for: (1) Analyzing processes, work oper- ations, concessions, quality audit re- ports, quality records, service records, complaints, returned product, and other sources of quality data to iden- tify existing and potential causes of nonconforming product, or other qual- ity problems. Appropriate statistical methodology shall be employed where necessary to detect recurring quality problems; (2) Investigating the cause of nonconformities relating to product, processes, and the quality system; (3) Identifying the action(s) needed to correct and prevent recurrence of non- conforming product and other quality problems; (4) Verifying or validating the correc- tive and preventive action to ensure that such action is effective and does not adversely affect the finished de- vice; (5) Implementing and recording changes in methods and procedures needed to correct and prevent identi- fied quality problems; (6) Ensuring that information related to quality problems or nonconforming product is disseminated to those di- rectly responsible for assuring the quality of such product or the preven- tion of such problems; and (7) Submitting relevant information on identified quality problems, as well as corrective and preventive actions, for management review. (b) All activities required under this section, and their results, shall be doc- umented. 181 Subpart K—Labeling and Packaging Control § 820.120 Device labeling. Each manufacturer shall establish and maintain procedures to control la- beling activities. (a) Label integrity. Labels shall be printed and applied so as to remain leg- ible and affixed during the customary conditions of processing, storage, han- dling, distribution, and where appro- priate use. (b) Labeling inspection. Labeling shall not be released for storage or use until a designated individual(s) has exam- ined the labeling for accuracy includ- ing, where applicable, the correct unique device identifier (UDI) or uni- versal product code (UPC), expiration date, control number, storage instruc- tions, handling instructions, and any additional processing instructions. The release, including the date and signa- ture of the individual(s) performing the examination, shall be documented in the DHR. (c) Labeling storage. Each manufac- turer shall store labeling in a manner that provides proper identification and is designed to prevent mixups. (d) Labeling operations. Each manu- facturer shall control labeling and packaging operations to prevent label- ing mixups. The label and labeling used for each production unit, lot, or batch shall be documented in the DHR. (e) Control number. Where a control number is required by §820.65, that con- trol number shall be on or shall accom- pany the device through distribution. [61 FR 52654, Oct. 7, 1996, as amended at 78 FR 58822, Sept. 24, 2013] § 820.130 Device packaging. Each manufacturer shall ensure that device packaging and shipping con- tainers are designed and constructed to protect the device from alteration or damage during the customary condi- tions of processing, storage, handling, and distribution. granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.140 Subpart L—Handling, Storage, Distribution, and Installation § 820.140 Handling. Each manufacturer shall establish and maintain procedures to ensure that mixups, damage, deterioration, con- tamination, or other adverse effects to product do not occur during handling. § 820.150 Storage. (a) Each manufacturer shall establish and maintain procedures for the con- trol of storage areas and stock rooms for product to prevent mixups, damage, deterioration, contamination, or other adverse effects pending use or distribu- tion and to ensure that no obsolete, re- jected, or deteriorated product is used or distributed. When the quality of product deteriorates over time, it shall be stored in a manner to facilitate proper stock rotation, and its condi- tion shall be assessed as appropriate. (b) Each manufacturer shall establish and maintain procedures that describe the methods for authorizing receipt from and dispatch to storage areas and stock rooms. § 820.160 Distribution. (a) Each manufacturer shall establish and maintain procedures for control and distribution of finished devices to ensure that only those devices ap- proved for release are distributed and that purchase orders are reviewed to ensure that ambiguities and errors are resolved before devices are released for distribution. Where a device’s fitness for use or quality deteriorates over time, the procedures shall ensure that expired devices or devices deteriorated beyond acceptable fitness for use are not distributed. (b) Each manufacturer shall main- tain distribution records which include or refer to the location of: (1) The name and address of the ini- tial consignee; (2) The identification and quantity of devices shipped; (3) The date shipped; and (4) Any control number(s) used. § 820.170 Installation. (a) Each manufacturer of a device re- quiring installation shall establish and 182 21 CFR Ch. I (4–1–25 Edition) maintain adequate installation and in- spection instructions, and where appro- priate test procedures. Instructions and procedures shall include directions for ensuring proper installation so that the device will perform as intended after installation. The manufacturer shall distribute the instructions and procedures with the device or other- wise make them available to the per- son(s) installing the device. (b) The person installing the device shall ensure that the installation, in- spection, and any required testing are performed in accordance with the man- ufacturer’s instructions and procedures and shall document the inspection and any test results to demonstrate proper installation. Subpart M—Records § 820.180 General requirements. All records required by this part shall be maintained at the manufac- turing establishment or other location that is reasonably accessible to respon- sible officials of the manufacturer and to employees of FDA designated to per- form inspections. Such records, includ- ing those not stored at the inspected establishment, shall be made readily available for review and copying by FDA employee(s). Such records shall be legible and shall be stored to minimize deterioration and to prevent loss. Those records stored in automated data processing systems shall be backed up. (a) Confidentiality. Records deemed confidential by the manufacturer may be marked to aid FDA in determining whether information may be disclosed under the public information regula- tion in part 20 of this chapter. (b) Record retention period. All records required by this part shall be retained for a period of time equivalent to the design and expected life of the device, but in no case less than 2 years from the date of release for commercial dis- tribution by the manufacturer. (c) Exceptions. This section does not apply to the reports required by §820.20(c) Management review, §820.22 Quality audits, and supplier audit re- ports used to meet the requirements of § 820.50(a) Evaluation of suppliers, con- tractors, and consultants, but does granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.198 apply to procedures established under these provisions. Upon request of a des- ignated employee of FDA, an employee in management with executive respon- sibility shall certify in writing that the management reviews and quality au- dits required under this part, and sup- plier audits where applicable, have been performed and documented, the dates on which they were performed, and that any required corrective action has been undertaken. § 820.181 Device master record. Each manufacturer shall maintain device master records (DMR’s). Each manufacturer shall ensure that each DMR is prepared and approved in ac- cordance with §820.40. The DMR for each type of device shall include, or refer to the location of, the following information: (a) Device specifications including appropriate drawings, composition, for- mulation, component specifications, and software specifications; (b) Production process specifications including the appropriate equipment specifications, production methods, production procedures, and production environment specifications; (c) Quality assurance procedures and specifications including acceptance cri- teria and the quality assurance equip- ment to be used; (d) Packaging and labeling specifica- tions, including methods and processes used; and (e) Installation, maintenance, and servicing procedures and methods. § 820.184 Device history record. Each manufacturer shall maintain device history records (DHR’s). Each manufacturer shall establish and main- tain procedures to ensure that DHR’s for each batch, lot, or unit are main- tained to demonstrate that the device is manufactured in accordance with the DMR and the requirements of this part. The DHR shall include, or refer to the location of, the following information: (a) The dates of manufacture; (b) The quantity manufactured; (c) The quantity released for dis- tribution; (d) The acceptance records which demonstrate the device is manufac- tured in accordance with the DMR; 183 (e) The primary identification label and labeling used for each production unit; and (f) Any unique device identifier (UDI) or universal product code (UPC), and any other device identification(s) and control number(s) used. [61 FR 52654, Oct. 7, 1996, as amended at 78 FR 58822, Sept. 24, 2013] § 820.186 Quality system record. Each manufacturer shall maintain a quality system record (QSR). The QSR shall include, or refer to the location of, procedures and the documentation of activities required by this part that are not specific to a particular type of device(s), including, but not limited to, the records required by §820.20. Each manufacturer shall ensure that the QSR is prepared and approved in ac- cordance with §820.40. § 820.198 Complaint files. (a) Each manufacturer shall main- tain complaint files. Each manufac- turer shall establish and maintain pro- cedures for receiving, reviewing, and evaluating complaints by a formally designated unit. Such procedures shall ensure that: (1) All complaints are processed in a uniform and timely manner; (2) Oral complaints are documented upon receipt; and (3) Complaints are evaluated to de- termine whether the complaint rep- resents an event which is required to be reported to FDA under part 803 of this chapter, Medical Device Report- ing. (b) Each manufacturer shall review and evaluate all complaints to deter- mine whether an investigation is nec- essary. When no investigation is made, the manufacturer shall maintain a record that includes the reason no in- vestigation was made and the name of the individual responsible for the deci- sion not to investigate. (c) Any complaint involving the pos- sible failure of a device, labeling, or packaging to meet any of its specifica- tions shall be reviewed, evaluated, and investigated, unless such investigation has already been performed for a simi- lar complaint and another investiga- tion is not necessary. granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.200 (d) Any complaint that represents an event which must be reported to FDA under part 803 of this chapter shall be promptly reviewed, evaluated, and in- vestigated by a designated indi- vidual(s) and shall be maintained in a separate portion of the complaint files or otherwise clearly identified. In addi- tion to the information required by §820.198(e), records of investigation under this paragraph shall include a determination of: (1) Whether the device failed to meet specifications; (2) Whether the device was being used for treatment or diagnosis; and (3) The relationship, if any, of the de- vice to the reported incident or adverse event. (e) When an investigation is made under this section, a record of the in- vestigation shall be maintained by the formally designated unit identified in paragraph (a) of this section. The record of investigation shall include: (1) The name of the device; (2) The date the complaint was re- ceived; (3) Any unique device identifier (UDI) or universal product code (UPC), and any other device identification(s) and control number(s) used; (4) The name, address, and phone number of the complainant; (5) The nature and details of the com- plaint; (6) The dates and results of the inves- tigation; (7) Any corrective action taken; and (8) Any reply to the complainant. (f) When the manufacturer’s formally designated complaint unit is located at a site separate from the manufacturing establishment, the investigated com- plaint(s) and the record(s) of investiga- tion shall be reasonably accessible to the manufacturing establishment. (g) If a manufacturer’s formally des- ignated complaint unit is located out- side of the United States, records re- quired by this section shall be reason- ably accessible in the United States at either: (1) A location in the United States where the manufacturer’s records are regularly kept; or 184 21 CFR Ch. I (4–1–25 Edition) (2) The location of the initial dis- tributor. [61 FR 52654, Oct. 7, 1996, as amended at 69 FR 11313, Mar. 10, 2004; 71 FR 16228, Mar. 31, 2006; 78 FR 58822, Sept. 24, 2013] Subpart N—Servicing § 820.200 Servicing. (a) Where servicing is a specified re- quirement, each manufacturer shall es- tablish and maintain instructions and procedures for performing and verifying that the servicing meets the specified requirements. (b) Each manufacturer shall analyze service reports with appropriate statis- tical methodology in accordance with §820.100. (c) Each manufacturer who receives a service report that represents an event which must be reported to FDA under part 803 of this chapter shall automati- cally consider the report a complaint and shall process it in accordance with the requirements of §820.198. (d) Service reports shall be docu- mented and shall include: (1) The name of the device serviced; (2) Any unique device identifier (UDI) or universal product code (UPC), and any other device identification(s) and control number(s) used; (3) The date of service; (4) The individual(s) servicing the de- vice; (5) The service performed; and (6) The test and inspection data. [61 FR 52654, Oct. 7, 1996, as amended at 69 FR 11313, Mar. 10, 2004; 78 FR 58822, Sept. 24, 2013] Subpart O—Statistical Techniques § 820.250 Statistical techniques. (a) Where appropriate, each manufac- turer shall establish and maintain pro- cedures for identifying valid statistical techniques required for establishing, controlling, and verifying the accept- ability of process capability and prod- uct characteristics. (b) Sampling plans, when used, shall be written and based on a valid statis- tical rationale. Each manufacturer shall establish and maintain proce- dures to ensure that sampling methods are adequate for their intended use and to ensure that when changes occur the granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.1 sampling plans are reviewed. These ac- tivities shall be documented. EFFECTIVE DATE NOTE: At 89 FR 7523, Feb. 2, 2024, part 820 was revised, effective Feb. 2, 2026. For the convenience of the user, the re- vised text is set forth as follows: PART 820—QUALITY MANAGEMENT SYSTEM REGULATION (EFF. 2-2-26) Subpart A—General Provisions Sec. 820.1 Scope. 820.3 Definitions. 820.5 [Reserved] 820.7 Incorporation by reference. 820.10 Requirements for a quality manage- ment system. Subpart B—Supplemental Provisions 820.20–820.30 [Reserved] 820.35 Control of records. 820.40 [Reserved] 820.45 Device labeling and packaging con- trols. Subparts C–O [Reserved] AUTHORITY: 21 U.S.C. 351, 352, 360, 360c, 360d, 360e, 360h, 360i, 360j, 360l, 371, 374, 381, 383; 42 U.S.C. 216, 262, 263a, 264. Subpart A—General Provisions § 820.1 Scope. (a) Applicability. Current good manu- facturing practice (CGMP) require- ments are set forth in this quality management system regulation (QMSR). The requirements in this part govern the methods used in, and the fa- cilities and controls used for, the de- sign, manufacture, packaging, labeling, storage, installation, and servicing of all finished devices intended for human use. The requirements in this part are intended to assure that finished devices will be safe and effective and otherwise in compliance with the Federal Food, Drug, and Cosmetic Act and that the use of other terminology, such as ‘‘safety and performance,’’ in this part does not change this statutory stand- ard or the requirements of this part. Any manufacturers engaged in the de- sign, manufacture, packaging, labeling, storage, installation, or servicing of a finished device must establish and maintain a quality management sys- tem that is appropriate for its specific device(s). Manufacturers subject to 185 this part include, but are not limited to, manufacturers that perform the functions of contract sterilization, in- stallation, relabeling, remanufac- turing, repacking, or specification de- velopment, as well as initial distribu- tors of foreign entities that perform these functions. If a manufacturer en- gages in only some operations subject to the requirements in this part, and not in others, that manufacturer need only comply with those requirements applicable to the operations in which it is engaged. (1) Finished devices. The provisions of this part shall apply to any finished de- vice, as defined in this part, intended for human use, that is manufactured in any State or Territory of the United States, the District of Columbia, or the Commonwealth of Puerto Rico, or that is imported or offered for import into the United States. (2) Components or parts. The provi- sions of this part do not apply to man- ufacturers of components or parts of finished devices, but such manufactur- ers are encouraged to consider provi- sions of this regulation as appropriate. (3) Blood and blood components. The provisions of this part do not apply to manufacturers of blood and blood com- ponents used for transfusion or for fur- ther manufacturing. Such manufactur- ers are subject to subchapter F of this chapter. (4) HCT/Ps. The provisions of this part apply to manufacturers of human cells, tissues, and cellular and tissue- based products (HCT/Ps), as defined in §1271.3(d) of this chapter, that are de- vices (subject to premarket review or notification, or exempt from notifica- tion, under an application submitted under the device provisions of the Fed- eral Food, Drug, and Cosmetic Act or under a biological product license ap- plication under section 351 of the Pub- lic Health Service Act). HCT/Ps regu- lated as devices are also subject to the donor-eligibility requirements set forth in part 1271, subpart C of this chapter and applicable current good tissue practice requirements in part 1271, subpart D of this chapter. In the event of a conflict between applicable regulations in part 1271 and in other parts of this chapter, the regulation specifically applicable to the device in granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.3 question shall supersede the more gen- eral regulation. (b) Conflicts with other requirements under the Federal Food, Drug, and Cos- metic Act. The QMSR for devices in this part supplements regulations in other parts of this chapter except where ex- plicitly stated otherwise. To the extent that any applicable requirements in this part conflict with requirements in other parts of this chapter, the require- ments specifically applicable to the de- vice in question shall supersede the more generally applicable require- ments. Moreover, to the extent that any clauses of ISO 13485 (incorporated by reference, see §820.7) conflict with any provisions of the Federal Food, Drug, and Cosmetic Act and/or its other implementing regulations, the Federal Food, Drug, and Cosmetic Act and/or its other implementing regula- tions will control. (c) Foreign manufacturers. A device that is imported or offered for import into the United States is subject to re- fusal of admission to the United States under section 801(a) of the Federal Food, Drug, and Cosmetic Act if, among other things, it appears to be adulterated as set forth in the Federal Food, Drug, and Cosmetic Act and its implementing regulations. (d) Exemptions or variances. (1) A man- ufacturer subject to any requirement under section 520(f)(1) of the Federal Food, Drug, and Cosmetic Act, includ- ing any requirements under this part, may petition for an exemption or vari- ance from such requirement in accord- ance with section 520(f)(2) of the Fed- eral Food, Drug, and Cosmetic Act. Pe- titions for an exemption or variance shall be submitted in accordance with the procedures set forth in §10.30 of this chapter. (2) FDA may initiate and grant a variance from any requirement(s) in this part when the Agency determines that such variance is in the best inter- est of the public health, including that there is a public health need for the de- vice and the device would not likely be made sufficiently available without the variance. Such variance will remain in effect only so long as there remains a public health need for the device and the device would not likely be made 186 21 CFR Ch. I (4–1–25 Edition) sufficiently available without the vari- ance. § 820.3 Definitions. The definitions in ISO 13485 and in Clause 3 of ISO 9000 (incorporated by reference, see §820.7) apply to this part, except as specified in paragraph (b) of this section, and do not affect the meaning of similar terms defined in this title. (a) The following terms, which are ei- ther not used or not defined in ISO 13485 or in Clause 3 of ISO 9000, also apply for the purposes of this part: Component means any raw material, substance, piece, part, software, firmware, labeling, or assembly that is intended to be included as part of the finished, packaged, and labeled device. Federal Food, Drug, and Cosmetic Act means the Federal Food, Drug, and Cosmetic Act, 21 U.S.C. 321 et seq., as amended. Finished device means any device or accessory to any device that is suitable for use or capable of functioning, whether or not it is packaged, labeled, or sterilized. Human cell, tissue, or cellular or tissue- based product (HCT/P) regulated as a de- vice means an HCT/P as defined in §1271.3(d) of this chapter that does not meet the criteria in §1271.10(a) of this chapter and that is also regulated as a device. Remanufacturer means any person who processes, conditions, renovates, repackages, restores, or does any other act to a finished device that signifi- cantly changes the finished device’s performance or safety specifications, or intended use. (b) All definitions in section 201 of the Federal Food, Drug, and Cosmetic Act shall apply to the regulation of quality management systems under this part and shall supersede the corre- lating terms and definitions in ISO 13485 (e.g., the definitions of device and labeling in section 201(h) and (m) of the Federal Food, Drug, and Cosmetic Act apply to this part and supersede the definitions for the correlating terms in ISO 13485 (labelling and medical de- vice)). In addition, the following terms and definitions apply to this part and supersede the definitions for the corre- lating terms in ISO 13485 or ISO 9000: granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 820.10 Implantable medical device shall have the meaning of ‘‘implant’’ as defined in section 860.3 of this chapter. Manufacturer means any person who designs, manufactures, fabricates, as- sembles, or processes a finished device. Manufacturer includes, but is not lim- ited to, those who perform the func- tions of contract sterilization, installa- tion, relabeling, remanufacturing, re- packing, or specification development, and initial distributors of foreign enti- ties performing these functions. Organization shall have the meaning of ‘‘manufacturer’’ as defined in this part. Rework means action taken on a non- conforming product so that it will ful- fill the specified requirements in the medical device file (MDF) before it is released for distribution. Safety and Performance shall have the meaning of ‘‘safety and effectiveness’’ in Clause 0.1 of ISO 13485. The phrase ‘‘safety and performance’’ does not re- lieve a manufacturer from any obliga- tion to implement controls or other measures that provide reasonable as- surance of safety and effectiveness. § 820.5 [Reserved] § 820.7 Incorporation by reference. Certain material is incorporated by reference into this part with the ap- proval of the Director of the Federal Register under 5 U.S.C. 552(a) and 1 CFR part 51. All approved incorpora- tion by reference (IBR) material is available for inspection at the Food and Drug Administration, and at the National Archives and Records Admin- istration (NARA). Contact FDA at: Dockets Management Staff, 5630 Fish- ers Lane, Rm. 1061, Rockville, MD 20852; 240–402–7500; https:// www.regulations.gov/document/FDA-2013- S-0610-0003. For information on the availability of this material at NARA, visit www.archives.gov/federal-register/ cfr/ibr-locations or email fr.inspection@nara.gov. This material may be obtained from the Inter- national Organization for Standardiza- tion (ISO), BIBC II, Chemin de Blandonnet 8, CP 401, 1214 Vernier, Ge- neva, Switzerland; +41–22–749–01–11; customerservice@iso.org, https:// www.iso.org/store.html. 187 (a) ISO 9000:2015(E) (‘‘ISO 9000’’), Quality Management systems—Fun- damentals and vocabulary, Clause 3— Terms and definitions, Fourth edition, September 15, 2015. IBR approved for §820.3. (b) ISO 13485:2016(E) (‘‘ISO 13485’’), Medical devices—Quality management systems—Requirements for regulatory pur- poses, Third edition, March 1, 2016; IBR approved for §§820.1, 820.3, 820.10, 820.35, and 820.45. § 820.10 Requirements for a quality management system. A manufacturer subject to this part as described by §820.1(a) must: (a) Document. Document a quality management system that complies with the applicable requirements of ISO 13485 (incorporated by reference, see §820.7) and other applicable require- ments of this part; and (b) Applicable regulatory requirements. Comply, as appropriate, with the other applicable regulatory requirements in this title, including, but not limited to the following, to fully comply with the listed ISO 13485 Clause: (1) For Clause 7.5.8 in ISO 13485, Iden- tification, the manufacturer must doc- ument a system to assign unique de- vice identification to the medical de- vice in accordance with the require- ments of part 830 of this chapter. (2) For Clause 7.5.9.1 in ISO 13485, Traceability—General, the manufac- turer must document procedures for traceability in accordance with the re- quirements of part 821 of this chapter, if applicable. (3) For Clause 8.2.3 in ISO 13485, Re- porting to regulatory authorities, the manufacturer must notify FDA of com- plaints that meet the reporting criteria of part 803 of this chapter. (4) For Clauses 7.2.3, 8.2.3, and 8.3.3, advisory notices shall be handled in ac- cordance with the requirements of part 806 of this chapter. (c) Design and development. Manufac- turers of class II, class III, and those class I devices listed in paragraph (c)(1) of this section and table 1 to paragraph (c)(2) of this section must comply with the requirements in Design and Devel- opment, Clause 7.3 and its Subclauses in ISO 13485. The class I devices are as follows: granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} § 820.20—§ 820.30 (1) Devices automated with computer software; and (2) The devices listed in the following table: TABLE 1 TO PARAGRAPH (c)(2) Section Device 868.6810 ........ Catheter, Tracheobronchial Suction. 878.4460 ........ Glove, Non-powdered Surgeon’s. 880.6760 ........ Restraint, Protective. 892.5650 ........ System, Applicator, Radionuclide, Manual. 892.5740 ........ Source, Radionuclide Teletherapy. (d) Devices that support or sustain life. Manufacturers of devices that support or sustain life, the failure of which to perform when properly used in accord- ance with instructions for use provided in the labeling can be reasonably ex- pected to result in a significant injury, must comply with the requirements in Traceability for Implantable Devices, Clause 7.5.9.2 in ISO 13485, in addition to all other applicable requirements in this part, as appropriate. (e) Enforcement. The failure to com- ply with any applicable requirement in this part renders a device adulterated under section 501(h) of the Federal Food, Drug, and Cosmetic Act. Such a device, as well as any person respon- sible for the failure to comply, is sub- ject to regulatory action. Subpart B—Supplemental Provisions § 820.20—§ 820.30 [Reserved] § 820.35 Control of records. In addition to the requirements of Clause 4.2.5 in ISO 13485 (incorporated by reference, see §820.7), Control of Records, the manufacturer must in- clude the following information in cer- tain records: (a) Records of complaints. In addition to Clause 8.2.2 in ISO 13485, Complaint Handling, the manufacturer shall maintain records of the review, evalua- tion, and investigation for any com- plaints involving the possible failure of a device, labeling, or packaging to meet any of its specifications. If an in- vestigation has already been performed for a similar complaint, another inves- tigation is not necessary, and the man- ufacturer shall maintain records docu- menting justification for not per- 188 21 CFR Ch. I (4–1–25 Edition) forming such investigation. For com- plaints that must be reported to FDA under part 803 of this chapter, com- plaints that a manufacturer deter- mines must be investigated, and com- plaints that the manufacturer inves- tigated regardless of those require- ments, the manufacturer must record the following information: (1) The name of the device; (2) The date the complaint was re- ceived; (3) Any unique device identifier (UDI) or universal product code (UPC), and any other device identification(s); (4) The name, address, and phone number of the complainant; (5) The nature and details of the com- plaint; (6) Any correction or corrective ac- tion taken; and (7) Any reply to the complainant. (b) Records of servicing activities. In adhering to Clause 7.5.4 in ISO 13485, Servicing Activities, the manufacturer must record the following information, at a minimum, for servicing activities: (1) The name of the device serviced; (2) Any UDI or UPC, and any other device identification(s); (3) The date of service; (4) The individual(s) who serviced the device; (5) The service performed; and (6) Any test and inspection data. (c) Unique Device Identification. In ad- dition to the requirements of Clauses 7.5.1, 7.5.8, and 7.5.9 in ISO 13485, the UDI must be recorded for each medical device or batch of medical devices. (d) Confidentiality. Records deemed confidential by the manufacturer may be marked to aid FDA in determining whether information may be disclosed under the public information regula- tion in part 20 of this chapter. § 820.40 [Reserved] § 820.45 Device labeling and packaging controls. In addition to the requirements of Clause 7.5.1 of ISO 13485 (incorporated by reference, see §820.7), Control of pro- duction and service provision, each manufacturer must document and maintain procedures that provide a de- tailed description of the activities to ensure the integrity, inspection, stor- age, and operations for labeling and granularity=word contentanalysis={punctuationbreaks=false dehyphenate=false} layoutanalysis={tabledetect=0 layoutdetect=0} Food and Drug Administration, HHS § 821.1 packaging, during the customary con- ditions of processing, storage, han- dling, distribution, and, as appropriate, use of the device. (a) The manufacturer must ensure la- beling and packaging has been exam- ined for accuracy prior to release or storage where applicable, to include the following: (1) The correct unique device identi- fier (UDI) or universal product code (UPC), or any other device identifica- tion(s); (2) Expiration date; (3) Storage instructions; (4) Handling instructions; and (5) Any additional processing instruc- tions. (b) The release of the labeling for use must be documented in accordance with Clause 4.2.5 of ISO 13485. (c) The manufacturer must ensure la- beling and packaging operations have been established and maintained to prevent mixups, including, but not lim- ited to, inspection of the labeling and packaging before use to assure that all devices have correct labeling and pack- aging, as specified in the medical de- vice file. Results of such labeling in- spection must be documented in ac- cordance with Clause 4.2.5 of ISO 13485. Subparts C–O [Reserved] PART 821—MEDICAL DEVICE TRACKING REQUIREMENTS Subpart A—General Provisions Sec. 821.1 Scope. 821.2 Exemptions and variances. 821.3 Definitions. 821.4 Imported devices. Subpart B—Tracking Requirements 821.20 Devices subject to tracking. 821.25 Device tracking system and content requirements: manufacturer require- ments. Subpart C—Additional Requirements and Responsibilities 821.30 Tracking obligations of persons other than device manufacturers: distributor requirements. 189 Subpart D—Records and Inspections 821.50 Availability. 821.55 Confidentiality. 821.60 Retention of records. AUTHORITY: 21 U.S.C. 331, 351, 352, 360, 360e, 360h, 360i, 371, 374. SOURCE: 58 FR 43447, Aug. 16, 1993, unless otherwise noted. Subpart A—General Provisions § 821.1 Scope. (a) The regulations in this part im- plement section 519(e) of the Federal Food, Drug, and Cosmetic Act (the act), which provides that the Food and Drug Administration may require a manufacturer to adopt a method of tracking a class II or class III device, if the device meets one of the following three criteria and FDA issues an order to the manufacturer: the failure of the device would be reasonably likely to have serious adverse health con- sequences; or the device is intended to be implanted in the human body for more than 1 year; or the device is a life-sustaining or life-supporting device used outside a device user facility. A device that meets one of these criteria and is the subject of an FDA order must comply with this part and is re- ferred to, in this part, as a ‘‘tracked de- vice.’’ (b) These regulations are intended to ensure that tracked devices can be traced from the device manufacturing facility to the person for whom the de- vice is indicated, that is, the patient. Effective tracking of devices from the manufacturing facility, through the distributor network (including dis- tributors, retailers, rental firms and other commercial enterprises, device user facilities, and licensed practi- tioners) and, ultimately, to the patient is necessary for the effectiveness of remedies prescribed by the act, such as patient notification (section 518(a) of the act) or device recall (section 518(e) of the act). Although these regulations do not preclude a manufacturer from involving outside organizations in that manufacturer’s device tracking effort, the legal responsibility for complying with this part rests with manufactur- ers who are subject to tracking orders, 0.00