Periodic reviews of QMS suitability and effectiveness at defined intervals — 820.20(c) obligation continues.
Twelve enumerated inputs required (5.6.2), structured output categories mandated (5.6.3), and 820.180(c) inspection exemption removed.
Meeting minutes demonstrating all 5.6.2 inputs were reviewed and resource decisions documented — now directly inspectable by FDA.
Maps to
QMSR / ISO 13485: §820.20 Management responsibility.
ISO 13485: §5.6 Management review
Requirement text
The organization shall document procedures for management review. Top management shall review the organization's quality management system at documented planned intervals to ensure its continuing suitability, adequacy, and effectiveness. The review shall include assessing opportunities for improvement and the need for changes to the QMS, including the quality policy and quality objectives.
Why this clause exists
Management review exists as a structural safeguard against the organizational drift that occurs when quality system problems are visible at the operational level but never escalate to the attention of leadership with the authority to allocate resources, change direction, or accept systemic risk. The QMSR's incorporation of ISO 13485 clause 5.6 transforms management review from a periodic quality check into a structured governance mechanism with twelve enumerated inputs and four required output categories. The most consequential QMSR-specific change is the removal of the Part 820.180(c) inspection exemption: management review records — including meeting minutes, the data packages presented, and the resource decisions taken — are now directly reviewable by FDA investigators. Organizations that previously used management review as a largely internal accountability mechanism must now ensure that every meeting produces inspection-ready evidence that all required inputs were considered, that substantive decisions were made, and that resource commitments were documented. FDA warning letters have consistently cited inadequate management review as evidence that leadership had knowledge of quality system failures — through complaint trends, repeat audit findings, and escalating CAPA backlogs — but failed to act. The 12-input structure is designed to prevent selective reporting; it requires that adverse data be placed in front of leadership on a defined schedule, not only when operational teams decide it warrants escalation.
What changed
§820.20 — Part 820 (legacy)
"Management with executive responsibility shall establish its policy and objectives for, and commitment to, quality. Management with executive responsibility shall ensure that the quality policy is understood, implemented, and maintained at all levels of the organization. Each manufacturer shall establish and maintain an adequate organizational structure to ensure that devices are designed and produced in accordance with the requirements of this part. (1) Responsibility and authority. Each manufacturer shall establish the appropriate responsibility, authority, and interrelation of all personnel who manage, perform, and assess work affecting quality, and provide the independence and authority necessary to perform these tasks. (2) Resources. Each manufacturer shall provide adequate resources, including the assignment of trained personnel, for management, performance of work, and assessment activities, including internal quality audits, to meet the requirements of this part. (3) Management representative. Management with executive responsibility shall appoint, and document such appointment of, a member of management who, irrespective of other responsibilities, shall have established authority over and responsibility for: (i) Ensuring that quality system requirements are effectively established and effectively maintained in accordance with this part; and (ii) Reporting on the performance of the quality system to management with executive responsibility for review. Management with executive responsibility shall review the suitability and effectiveness of the quality system at defined intervals and with sufficient frequency according to established procedures to ensure that the quality system satisfies the requirements of this part and the manufacturer's established quality policy and objectives. The dates and results of quality system reviews shall be documented. Each manufacturer shall establish a quality plan which defines the quality practices, resources, and activities relevant to devices that are designed and manufactured. The manufacturer shall establish how the requirements for quality will be met. Each manufacturer shall establish quality system procedures and instructions. An outline of the structure of the documentation used in the quality system shall be established where appropriate."
§5.6 — ISO 13485:2016 (current)
"5.6.1 General The organization shall document procedures for management review. Top management shall review the organization's quality management system at documented planned intervals to ensure its continuing suitability, adequacy and effectiveness. The review shall include assessing opportunities for improvement and the need for changes to the quality management system, including the quality policy and quality objectives. Records from management reviews shall be maintained (see 4.2.5). 5.6.2 Review input The input to management review shall include, but is not limited to, information arising from: a) feedback; b) complaint handling; c) reporting to regulatory authorities; d) audits; e) monitoring and measurement of processes; f) monitoring and measurement of product; g) corrective action; h) preventive action; i) follow-up actions from previous management reviews; j) changes that could affect the quality management system; k) recommendations for improvement; l) applicable new or revised regulatory requirements. 5.6.3 Review output The output from management review shall be recorded (see 4.2.5) and include the input reviewed and any decisions and actions related to: a) improvement needed to maintain the suitability, adequacy, and effectiveness of the quality management system and its processes; b) improvement of product related to customer requirements; c) changes needed to respond to applicable new or revised regulatory requirements; d) resource needs."
Δ Management review gains a documented procedure requirement, a prescribed input list (12 items including regulatory authority reporting), and structured output categories — far beyond Part 820's brief interval-and-document requirement.
Common gaps (what we see in audits)
- Incomplete Management Review Inputs — ISO 13485 clause 5.6.2 enumerates 12 specific categories of required inputs. Many Part 820-era management review procedures address quality system performance generally but do not systematically cover all required inputs, particularly feedback data (beyond complaints), regulatory reporting status, and new or revised regulatory requirements.
- Management Review Records Not Inspection-Ready — With the removal of 820.180(c) protections, management review records are now subject to FDA inspection. Many organizations have informal or incomplete management review minutes that do not demonstrate systematic coverage of required inputs or traceable action items with closure evidence.
- No record of 'Resource Decisions' — Minutes show that a problem was discussed, but fail to record a 'decision' to provide resources (people/money/tools) to fix it. ISO 13485 §5.6.3 requires resource-related outputs.
- No Structured Output Documentation — ISO 13485 clause 5.6.3 requires that management review outputs include specific categories of decisions and actions. Many organizations document meeting minutes in narrative form without mapping outputs to the required categories (QMS improvement, product improvement, regulatory response, resource needs).
- Action Items Not Tracked to Closure — ISO 13485 requires follow-up actions from previous management reviews as a required input to subsequent reviews. Many organizations assign action items during management review but lack formal tracking to closure, meaning previous action items are not systematically reviewed at the next meeting.