QMSR / ISO 13485 §N/A (no direct Part 820 equivalent; cf. §820.198 Complaint files)

QMSR / ISO 13485: §N, §A (no direct Part 820 equivalent, §cf. §820.198 Complaint files)

ISO 13485: §8.2.1 Feedback

ISO 13485:2016 § 8.2.1 introduced a proactive post-market surveillance obligation that did not exist as an explicit QMS requirement under Part 820 — Part 820 addressed reactive complaint handling but did not require manufacturers to maintain a systematic feedback process encompassing broader field data, clinical literature monitoring, and regulatory authority communications. The distinction matters: a manufacturer that only processes formal complaints as they arrive is operating a reactive quality system that can miss signals distributed across multiple channels — field service observations that don't reach complaint thresholds individually, published clinical literature identifying new use cases or adverse event patterns, or peer-device regulatory actions that imply emerging hazards. QMSR's incorporation of 8.2.1 brings this proactive obligation into the FDA regulatory framework for the first time, establishing that manufacturers of QMSR-regulated devices must monitor the full post-market signal environment, not just the complaint queue. The requirement to feed feedback analysis into the risk management file creates the closed-loop between pre-market risk assessment and post-market experience that ISO 14971:2019 also requires — a risk estimate based only on pre-market data becomes increasingly stale as real-world experience accumulates. Management review input is the organizational escalation mechanism: feedback trends that indicate a quality or safety concern require leadership visibility and resource response, not just technical tracking at the QMS analyst level.

This represents one of the most conceptually significant shifts in the QMSR transition. Part 820 addressed customer feedback primarily through the lens of complaint handling under 820.198. There was no standalone requirement for systematic feedback collection or post-market surveillance in Part 820; these expectations were addressed through separate regulatory provisions (post-market surveillance orders under Section 522, MDR under Part 803) rather than the quality system regulation itself.

ISO 13485 clause 8.2.1 establishes an explicit requirement for a documented feedback collection and monitoring process as part of the QMS. This is broader than complaint handling: it encompasses proactive collection and analysis of information on whether the organization has met customer requirements, including monitoring of product performance in the field, user feedback, service data, and any other relevant post-market information. The feedback process must be documented, must include provisions for collecting data from both production and post-production activities, and must feed information into risk management, CAPA, and management review.

The FDA preamble acknowledged that ISO 13485's feedback requirement goes beyond what Part 820 explicitly required, representing a genuine expansion of QMS scope. However, the agency noted that proactive feedback collection aligns with existing FDA expectations for post-market surveillance and that manufacturers marketing devices in the EU or under MDSAP already have these systems in place.

For organizations with Part 820-only QMS heritage, this often means building an entirely new procedure. The feedback system must encompass not just complaints but also proactive data collection: clinical data, literature monitoring, field service reports, customer satisfaction surveys, and regulatory authority communications. This data must be analyzed at defined intervals and the results fed into CAPA determination, risk management file updates, and management review inputs.