Label integrity controls, label inspection at application, and controlled storage — 820.45 prescriptive labeling requirements are fully retained by QMSR.
ISO 13485 has no dedicated labeling clause; QMSR 820.45 is retained as an FDA-specific addition, now encompassing UDI labeling per 21 CFR Part 830.
UDI label verification records and designated-individual sign-off at point of application — ISO 13485-only QMS implementations routinely miss this layer.
Maps to
QMSR / ISO 13485: §820.120 Device labeling.
ISO 13485: §7.5.1 Control of production and service provision
Requirement text
Labeling activities shall be controlled. Label accuracy shall be verified before release.
Why this clause exists
Labeling errors are among the most frequently cited causes of device recalls because the label is the primary communication channel between the manufacturer and the user: incorrect identification, missing contraindications, erroneous instructions for use, or wrong-device labels on finished goods can cause patient harm directly — by directing the wrong device to the wrong use or by failing to convey the information a clinician needs to use the device safely. Label accuracy verification before release is the last gate before an incorrectly labeled device reaches a customer, and its effectiveness depends entirely on the verification being objective and documented rather than assumed. Label storage and issuance controls prevent mixing of label revisions and device types: mislabeled inventory is typically a storage and control problem, not a design problem — the correct label exists, but access to obsolete or mismatched labels was not controlled. UDI labeling requirements under the FDA UDI rule and QMSR 820.45 are regulatory requirements independent of the QMS procedure — the UDI must appear on the label in both human-readable and automatic identification and data capture (AIDC) format, and each label configuration must be registered in GUDID — making UDI label accuracy a regulatory compliance question, not merely a quality preference. Labeling procedures that are documented, trained, and verified create a consistent, auditable process that survives personnel turnover and reduces reliance on individual memory for a function where error consequences are immediate and visible.
What changed
Part 820 section 820.45 contained detailed, prescriptive labeling control requirements: procedures for label integrity, inspection, storage, and control of labeling operations. It required that labels be designed, printed, and applied under controlled conditions, that each label be inspected for accuracy during application, and that labeling storage areas be controlled to prevent mix-ups. These requirements were among the most prescriptive in Part 820.
ISO 13485:2016 does not have a dedicated labeling clause. Labeling is addressed only generally under clause 7.5.1 (control of production and service provision) which requires documented procedures and work instructions, and clause 7.5.8 (identification). There is no ISO 13485 equivalent to Part 820's explicit requirements for label inspection, label storage controls, or label issuance accountability.
This is a critical QMSR-specific retention. The FDA recognized that ISO 13485 does not adequately address labeling controls for FDA-regulated devices, so the QMSR retains 820.45 as a standalone requirement. The QMSR final rule preamble explicitly states that labeling controls remain essential for device safety and that these requirements go beyond what ISO 13485 provides. Additionally, the QMSR 820.45 requirement now encompasses UDI (Unique Device Identification) labeling requirements, linking labeling controls to the FDA UDI rule (21 CFR Part 830). This means FDA-regulated manufacturers must maintain labeling controls that exceed what an ISO 13485-only certification would require.
Common gaps (what we see in audits)
- No Dedicated Label Control Procedure — Companies relying solely on ISO 13485 may not have a standalone labeling control procedure. They may address labeling as part of general production work instructions without the specificity needed for FDA compliance — dedicated label inspection steps, storage controls, and issuance accountability.
- Missing UDI Integration in Labeling Procedures — Labeling procedures do not address UDI assignment, formatting, placement, or GUDID database submission requirements. UDI is now explicitly linked to QMSR labeling controls, and procedures must ensure UDI is correctly applied to every device label.
- No 'Designated Individual' check — Procedures allow any operator to release labels, missing the 'designated individual' requirement retained from 820.45.
- No Label Verification at Point of Application — Part 820 required label inspection during the labeling operation to verify accuracy and correctness. Many QMS libraries lack a defined verification step at the point of label application, relying instead on final inspection to catch label errors after the fact.
- Inadequate Label Storage and Segregation Controls — Labels for different products or versions stored together without adequate segregation, version control, or environmental controls. QMSR 820.45 requires that label storage prevent mix-ups and that obsolete labels be controlled.