FDA QMSR & ISO 13485 Compliance for Laser Cutting

As of February 2, 2026, the FDA's new Quality Management System Regulation (QMSR) replaced the former 21 CFR Part 820 Quality System Regulation. The QMSR incorporates ISO 13485:2016 by reference, harmonizing U.S. requirements with international standards. Laser cutting of implantable and Class II/III medical devices remains a "special process" requiring formal process validation (IQ/OQ/PQ).

Quick Answer

Under the QMSR (effective Feb 2, 2026), FDA now requires compliance with ISO 13485:2016 plus "FDA-Plus" requirements (UDI, MDR, labeling). IQ/OQ/PQ validation remains mandatory for laser cutting as a special process. Re-validation is required after any process change. The FDA's inspection scope has expanded to include internal audits, supplier audits, and management review reports.

QMSR: What Changed on February 2, 2026

The FDA finalized the Quality Management System Regulation (QMSR) to harmonize U.S. medical device quality requirements with the globally recognized ISO 13485:2016 standard. Key changes for laser cutting operations:

ISO 13485:2016 Now Mandatory

• Quality system must comply with ISO 13485:2016 clauses
• ISO 9000:2015 vocabulary definitions now apply
• Risk management per ISO 14971 integrated throughout
• Formal supplier control and purchasing processes required
• Management review and internal audit documentation now FDA-reviewable

"FDA-Plus" Requirements Retained

• UDI: Unique Device Identification labeling per 21 CFR 830
• MDR: Medical Device Reporting per 21 CFR 803
• Corrections/Removals: Per 21 CFR 806
• Labeling: Device labeling per 21 CFR 801
• Records: Complaint files and servicing per QMSR subparts

Validation Protocol (IQ/OQ/PQ)

IQ — Installation Qualification

• Equipment installed per manufacturer specifications
• Utility connections verified (power, gas, cooling, exhaust)
• Software version documented and validated
• Safety interlocks functional and tested
• Calibration records for all measuring instruments
• Environmental conditions documented (temp, humidity, particulate)

OQ — Operational Qualification

• Define critical process parameters (CPP): power, speed, frequency, gas pressure, focus
• DOE (Design of Experiments) to establish operating ranges
• Worst-case testing at parameter extremes
• Alarm and shutdown response verification
• Define critical quality attributes (CQA): kerf width, HAZ, Ra, dimensional accuracy
• Establish process capability (Cpk ≥ 1.33, target ≥ 1.67)

PQ — Performance Qualification

• Minimum 3 consecutive production runs at nominal parameters
• All CQAs measured on statistically significant sample size
• All runs must meet acceptance criteria
• Production conditions: actual operators, actual material lots
• Process monitoring data recorded and analyzed
• Validation report with statistical analysis (Cpk, histograms)

Documentation Requirements (QMSR)

Document	Purpose	Reference	Retention
Validation Master Plan	Overall validation approach	ISO 13485 §7.5.6	Device life + 2 years
IQ/OQ/PQ Protocols	Test procedures and acceptance criteria	ISO 13485 §7.5.6	Device life + 2 years
Process Specification	Nominal parameters and tolerances	ISO 13485 §7.5.7	Current + superseded
Device Master Record	Part specs, drawings, BOM	ISO 13485 §4.2.3	While device is produced
Batch Records	Per-batch parameter and inspection data	ISO 13485 §7.5.1	Device life + 2 years
Management Review	QMS effectiveness review	ISO 13485 §5.6	Per QMS policy

Note: Under the QMSR (effective Feb 2, 2026), the FDA no longer uses the former QSIT inspection technique. Inspections now align with QMSR requirements and include review of internal audits, supplier audits, and management review reports — areas previously exempt from routine FDA review.