Formal documented reviews at defined stages with cross-functional attendees and recorded findings — 820.30(e) structure preserved.
ISO 13485 drops explicit independent-reviewer mandate, but FDA preamble still expects it; follow-up action status now explicitly required.
Independent-reviewer identity and action-item closure evidence — FDA inspectors continue to look for both despite the text change.
Maps to
QMSR / ISO 13485: §820.30(e) Design review.
ISO 13485: §7.3.5 Design and development review
ISO 14971: §9 Risk management review
Requirement text
At suitable stages, systematic reviews of design and development shall be performed to evaluate the ability of results to meet requirements, identify problems, and propose necessary actions. Participants shall include representatives of functions concerned with the design stage being reviewed, as well as other specialist personnel. FDA-Plus: Reviews must include independent reviewers not directly responsible for the design stage under review.
Why this clause exists
Design reviews exist to surface problems before they are embedded in hardware, validated processes, or regulatory submissions — where they become exponentially more expensive to correct. The failure mode that the requirement guards against is insular design: a team deeply invested in its own work tends toward optimism about the adequacy of its outputs. An independent reviewer, by contrast, has both the standing and the mandate to challenge assumptions that the team has treated as settled. The FDA retained the independent reviewer expectation in the QMSR preamble even though ISO 13485:2016 clause 7.3.5 uses the softer language of 'specialist personnel' — the FDA preamble commentary (Comment 46) makes clear that independent review adds a fresh perspective and that inspectors will continue to look for it. Audit experience consistently shows that design reviews conducted without substantive outside perspective become confirmation exercises: attendees review each other's work, action items are sparse, and obvious problems are missed. When field failures traceable to design flaws occur, FDA inspectors regularly find that internal design reviews identified the same problem and either closed it without resolution or never opened an action item at all.
What changed
§820.30(e) — Part 820 (legacy)
"Each manufacturer shall establish and maintain procedures to ensure that formal documented reviews of the design results are planned and conducted at appropriate stages of the device's design development. The procedures shall ensure that participants at each design review include representatives of all functions concerned with the design stage being reviewed and an individual(s) who does not have direct responsibility for the design stage being reviewed, as well as any specialists needed. The results of a design review, including identification of the design, the date, and the individual(s) performing the review, shall be documented in the design history file (the DHF)."
§7.3.5 — ISO 13485:2016 (current)
"At suitable stages, systematic reviews of design and development shall be performed in accordance with planned and documented arrangements to: a) evaluate the ability of the results of design and development to meet requirements; b) identify and propose necessary actions. Participants in such reviews shall include representatives of functions concerned with the design and development stage being reviewed, as well as other specialist personnel. Records of the results of the reviews and any necessary actions shall be maintained and include the identification of the design under review, the participants involved and the date of the review (see 4.2.5)."
Δ Drops the explicit requirement for an independent reviewer with no direct design responsibility; records must now capture necessary actions, not just results.
Common gaps (what we see in audits)
- No independent reviewer despite FDA expectation — While ISO 13485 7.3.5 does not explicitly require an independent reviewer, the FDA's QMSR preamble makes clear that independent review remains an expectation. Companies that relied on Part 820's explicit language and have now shifted to ISO 13485's text alone may drop the independent reviewer requirement from their procedures, creating an inspection risk.
- Lack of independent reviewer — Design reviews are attended only by the core project team, missing the 'independent' reviewer required by the QMSR (retained from 820.30(e)).
- Design review records lack problem identification and proposed actions — ISO 13485 7.3.5 requires that review records include identification of problems and proposed actions. Many legacy design review meeting minutes capture attendees, agenda, and decisions but do not systematically document identified problems, proposed actions, responsible parties, and follow-up status.
- Reviews not conducted at stages defined in the design plan — ISO 13485 7.3.5 requires reviews 'at suitable stages, in accordance with planned and documented arrangements.' Some companies conduct ad hoc design reviews rather than reviews formally linked to the stages defined in their design and development plan per 7.3.2.
- Missing cross-functional representation at reviews — ISO 13485 7.3.5 requires participants to include 'representatives of functions concerned with the design and development stage(s) being reviewed.' Some companies conduct design reviews with only engineering participants, without representation from quality, regulatory, manufacturing, or clinical functions.