Defined responsibilities, authority interrelations, and management representative appointment with reporting obligation — 820.20(b)(1) and 820.20(b)(3) obligations continue under ISO 13485 §5.5.
Responsibilities must be documented AND communicated (§5.5.1); management representative gains a third authority area — promoting awareness of regulatory and QMS requirements (§5.5.2(c)); internal communication processes are now a standalone requirement (§5.5.3).
Written management representative appointment covering all three §5.5.2 authority areas; documented responsibility matrix with verification independence; and defined internal communication channels for QMS effectiveness.
Maps to
QMSR / ISO 13485: §820.20 Management responsibility.
ISO 13485: §5.5.1 Responsibility and authority, §5.5.2 Management representative, §5.5.3 Internal communication
Requirement text
Top management shall ensure that responsibilities and authorities are defined, documented, and communicated within the organization. Top management shall document the interrelation of all personnel who manage, perform, and verify work affecting quality, and shall ensure the independence and authority necessary to perform these tasks. Top management shall appoint a management representative who, irrespective of other responsibilities, has responsibility and authority for: ensuring that QMS processes are documented; reporting to top management on QMS effectiveness and any need for improvement; and ensuring the promotion of awareness of applicable regulatory requirements and QMS requirements throughout the organization. Top management shall ensure appropriate internal communication processes are established and that communication takes place regarding QMS effectiveness.
Why this clause exists
Organizational accountability failures are among the most persistent root causes in FDA warning letters. When quality-affecting tasks are performed by people who do not know they are responsible for them, verified by people without independence from production pressure, or escalated through organizations without a designated management representative to own the pathway, quality systems fail systematically rather than episodically. ISO 13485 clause 5.5 addresses each of these failure modes at the structural level.
The §5.5.1 requirement that responsibilities and authorities be defined, documented, and communicated is substantially stronger than a job description requirement. The interrelation obligation — documenting how all personnel who manage, perform, and verify quality-affecting work relate to one another — creates an organizational map of the quality system. The independence and authority requirement addresses the well-documented failure mode in which quality verification is assigned to personnel who are also accountable for production throughput, creating an incentive structure that systematically undermines verification integrity. FDA warning letters citing inadequate 'organizational independence' typically trace to the absence of documented interrelations and explicit authority grants.
The §5.5.2 management representative requirement is a single-point-of-accountability mechanism. Most organizations have distributed quality responsibilities; the management representative is the person with designated cross-cutting authority to ensure processes are documented, to report QMS performance to top management without filtering, and to drive regulatory awareness across functions that might otherwise treat compliance as someone else's concern. The ISO 13485 formulation adds the regulatory awareness promotion obligation — making explicit that the management representative's role includes active communication of applicable regulatory requirements to all functions, not passive maintenance of a procedure library.
The §5.5.3 internal communication requirement ensures that QMS effectiveness is not a topic reserved for management review meetings. Organizations that communicate quality performance only through formal review cycles are slower to detect and respond to emerging problems than those with established channels for real-time QMS information flows.
What changed
§820.20(b) — Part 820 (legacy)
"Each manufacturer shall establish and maintain an adequate organizational structure to ensure that devices are designed and produced in accordance with the requirements of this part. (1) Responsibility and authority. Each manufacturer shall establish the appropriate responsibility, authority, and interrelation of all personnel who manage, perform, and assess work affecting quality, and provide the independence and authority necessary to perform these tasks. (2) Resources. Each manufacturer shall provide adequate resources, including the assignment of trained personnel, for management, performance of work, and assessment activities, including internal quality audits, to meet the requirements of this part. (3) Management representative. Management with executive responsibility shall appoint, and document such appointment of, a member of management who, irrespective of other responsibilities, shall have established authority over and responsibility for: (i) Ensuring that quality system requirements are effectively established and effectively maintained in accordance with this part; and (ii) Reporting on the performance of the quality system to management with executive responsibility for review."
§5.5 — ISO 13485:2016 (current)
"5.5.1 Responsibility and authority Top management shall ensure that responsibilities and authorities are defined, documented and communicated within the organization. Top management shall document the interrelation of all personnel who manage, perform and verify work affecting quality and shall ensure the independence and authority necessary to perform these tasks. 5.5.2 Management representative Top management shall appoint a member of management who, irrespective of other responsibilities, has responsibility and authority that includes: a) ensuring that processes needed for the quality management system are documented; b) reporting to top management on the effectiveness of the quality management system and any need for improvement; c) ensuring the promotion of awareness of applicable regulatory requirements and quality management system requirements throughout the organization. 5.5.3 Internal communication Top management shall ensure that appropriate communication processes are established within the organization and that communication takes place regarding the effectiveness of the quality management system."
Δ Responsibilities must now be documented AND communicated (§5.5.1). Management representative gains a third authority area — promoting regulatory awareness throughout the organization (§5.5.2(c)). §5.5.3 internal communication is a new requirement with no Part 820 equivalent.
Common gaps (what we see in audits)
- Management Representative Appointment Not Documented or Missing Third Authority Area — The management representative is informally known within the organization but the appointment is not formally documented in a controlled record that specifies all three authority areas of ISO 13485 §5.5.2. Most commonly, the regulatory awareness promotion obligation (§5.5.2(c)) is absent from the appointment letter or job description.
- Responsibility Matrix Not Maintained or Does Not Cover Verification Independence — The organization has an org chart and individual job descriptions but has not documented the interrelation of all personnel managing, performing, and verifying quality-affecting work. ISO 13485 §5.5.1 requires documentation of these interrelations, including the independence and authority necessary to perform verification tasks.
- No Internal Communication Process for QMS Effectiveness — QMS performance information is communicated only through formal management review meetings. There are no defined channels or processes for communicating QMS effectiveness between management review cycles. ISO 13485 §5.5.3 requires appropriate communication processes to be established and communication to take place regarding QMS effectiveness.
- Responsibilities Defined But Not Communicated to All Relevant Personnel — Responsibility documents exist but relevant personnel — particularly those in production or support functions — are unaware of their documented quality-affecting responsibilities. ISO 13485 §5.5.1 requires that responsibilities and authorities be communicated within the organization, not merely documented.
- Verification Independence Not Structurally Protected — Personnel assigned to verify quality-affecting work have reporting lines or performance incentives that create pressure to prioritize throughput over verification integrity. ISO 13485 §5.5.1 requires that independence and authority necessary to perform verification tasks be ensured.