FDA didn't just rename Part 820 — it replaced most of its own requirements with an ISO 13485:2016 incorporation. Here's exactly what maps to what, and what terminology to stop using.
The single biggest change is structural: FDA deleted most of its own detailed, standalone quality system requirements and replaced them with an incorporation-by-reference to ISO 13485:2016, keeping only a narrow set of provisions the standard doesn't cover. The old regulation ran through roughly fifteen subparts, each written and enforced entirely by FDA. The amended regulation now points to an international consensus standard for the bulk of its substantive requirements, with Part 820 itself reduced to scope, definitions, incorporation by reference, and supplemental U.S.-specific provisions. If you're trying to understand what actually needs to change in your quality system, this section-by-section comparison is the place to start.
The old Quality System Regulation was organized into detailed subparts, each spelling out FDA's own requirements: general provisions, quality system requirements (management responsibility, quality audit, personnel), design controls, document controls, purchasing controls, identification and traceability, production and process controls, acceptance activities, nonconforming product, CAPA, labeling and packaging, handling and storage, and records.
The amended Part 820 is dramatically shorter on its face. It establishes scope and definitions, incorporates ISO 13485:2016 by reference as the operative quality management system standard, and retains a small number of standalone provisions for requirements the standard doesn't fully address — records specifics, complaint file specifics, and definitions unique to FDA's regulatory framework. The substantive detail that used to live in FDA's own subparts now lives in the ISO standard's clause structure instead.
Several terms manufacturers built entire procedure libraries around no longer match the current regulation:
None of these are cosmetic to an auditor. A quality manual that still uses the old vocabulary throughout reads as though it hasn't been substantively reviewed since before the transition — which is itself the kind of observation that invites closer scrutiny of everything else.
FDA's own crosswalk, published alongside the QMSR final rule, maps the old subparts to the new clause structure roughly as follows:
Labeling and packaging (old 820.120/820.130) is the one area that doesn't map cleanly into an ISO 13485 clause — it remains governed separately under 21 CFR Parts 801 and 809, unaffected by the QMSR rulemaking.
ISO 13485:2016 requires several things the old Part 820 never spelled out directly, even though well-run quality systems often did them anyway:
Explicit risk management integration. Clause 7.1 requires risk management to be applied throughout product realization, referencing ISO 14971 by name. The old 820.30 expected risk analysis as part of design controls but didn't mandate a documented, standard-referenced risk management process running through production and post-market activities as well.
Documented quality objectives at relevant functions and levels. Clause 5.4.1 requires quality objectives to be established at relevant functions and levels within the organization, not just at the top-management level.
A defined customer feedback process. Clause 8.2.1 requires a documented process for gathering and monitoring customer feedback as an input to the quality management system — broader than complaint handling alone.
More explicit infrastructure and work environment controls. Clauses 6.3 and 6.4 require documented requirements for infrastructure and work environment where they affect product conformity, including contamination control considerations that weren't spelled out as explicitly in the old regulation.
A handful of provisions exist because ISO 13485:2016, written for a global audience, doesn't address requirements specific to FDA's regulatory framework:
Building a current SOP structure around this mapping — rather than patching the old subpart-numbered procedures — is the more durable way to close the gap. For the bigger picture on how this fits together, see the QMSR transition guide.
Coplain converts existing 21 CFR 820 procedures into current, ISO 13485-mapped documentation without starting your quality system from scratch. Free trial at coplain.com.
Q: Did FDA eliminate 21 CFR Part 820?
A: No. Part 820 still exists, but its content changed substantially — it now incorporates ISO 13485:2016 by reference as the core quality management system standard, with only a narrow set of FDA-specific provisions retained as standalone requirements.
Q: Is 21 CFR 820.30 design controls still the correct citation?
A: Not as a standalone section in the same form. Design and development requirements now live in ISO 13485:2016 Clause 7.3, incorporated into Part 820 by reference. The content is closely equivalent, but the citation and structure changed.
Q: What is the biggest documentation risk in the transition?
A: Procedures, forms, and training materials that still reference obsolete subpart numbers or terminology from the old Quality System Regulation. The operational content may be fine; the documentation trail signals it hasn't been reviewed since before the transition.
Q: Did labeling and packaging requirements change under the QMSR?
A: No. Labeling and packaging remain governed by 21 CFR Parts 801 and 809, which were not part of the QMSR rulemaking and continue to apply independently.
Coplain turns any work instruction into a print-ready, audit-proof job aid in minutes.
Try Coplain free →AS9100 Rev D Documentation Checklist: 12 Items Auditors Check First
Most audit failures aren't about process gaps. They're about documentation that doesn't reflect reality. Here's the checklist we wish existed before our first Rev D audit.
6 min readCOMPLIANCEFDA 21 CFR Part 820 Documentation Requirements: What Trips Up Manufacturers
Warning letters. 483 observations. Consent decrees. Most FDA enforcement actions have one thing in common: inadequate documentation. Here's what the agency actually looks for.
10 min readCOMPLIANCEISO 9001:2015 Documentation Guide: What You Actually Need vs What You Think
The 2015 revision eliminated the quality manual requirement and six mandatory procedures. What it added is more demanding. Here's what actually changed — and what your registrar looks for during surveillance.
7 min readRelated Tools & Templates
COPLAIN PLATFORM
See every tool that turns complex work instructions into floor-ready documents.