Medical device manufacturing has a new rulebook

For most of three decades, US medical device manufacturing ran on the same regulation: the Quality System Regulation (QSR) in 21 CFR Part 820. That changed on February 2, 2026, when FDA’s Quality Management System Regulation (QMSR) took effect, incorporating ISO 13485:2016 by reference (FDA). At the same time, a pending Section 232 tariff investigation, a smaller FDA workforce and a push toward smart factories are changing how and where devices are made.

This guide covers what manufacturers need to know in 2026: the size of the US industry, the regulatory requirements that apply on the factory floor, the trends shaping operations, and a practical readiness checklist.

The US industry at a glance

The United States is the world’s largest medical device market. The International Trade Administration’s SelectUSA program reports that the industry supports “over 500,000” direct jobs, that US exports “exceeded $103 billion in 2023,” and counts 9,009 establishments in 2022 (SelectUSA). AdvaMed puts direct employment at “nearly 519,000” across “over 6,500” firms, and notes that more than 80% of device companies have fewer than 50 employees (AdvaMed).

That last figure matters for manufacturing strategy. Most device makers are small, which means quality, regulatory and production work is often done by the same few people, and many rely on contract manufacturers for part or all of production.

What regulations apply to medical device manufacturing?

If you manufacture a finished device for the US market, these are the core obligations (FDA, Overview of Device Regulation):

RequirementRegulationWhat it means for manufacturing
Establishment registration and device listing21 CFR Part 807Register each facility and list devices annually; the FY2027 registration fee is $13,785 (Federal Register)
Premarket clearance or approvalParts 807 (510(k)), 814 (PMA), De NovoProduction must match the cleared or approved design
Quality management systemPart 820 (QMSR)ISO 13485:2016 plus FDA-specific requirements
Labeling and UDIParts 801, 830; §820.45Labeling inspection and release, unique device identifiers
Medical device reportingPart 803Report deaths, serious injuries and certain malfunctions
Corrections and removalsPart 806Report certain field actions within 10 working days

What QMSR changes on the production floor

QMSR is not a new set of manufacturing rules so much as a new frame. ISO 13485 clause 7.5 (production and service provision) now governs production controls, with FDA-specific additions kept in Part 820. Four points stand out for manufacturing teams:

  • Process validation is the default expectation. In the final rule, FDA states that “all processes require some degree of qualification, verification, or validation,” and that “manufacturers should not rely solely on inspection and testing” (Federal Register final rule).
  • Risk management runs through everything. ISO 13485 requires a risk-based approach across QMS processes, and FDA inspectors now evaluate it in every area.
  • Labeling remains FDA-specific. §820.45 keeps detailed requirements for labeling and packaging inspection and release, documented under ISO 13485 clause 4.2.5 (eCFR Part 820).
  • Records are more visible. The old §820.180(c) exception for management review, quality audit and supplier audit reports is gone, so FDA can now review them during inspections (FDA QMSR FAQ).

How FDA inspects manufacturers now

FDA’s revised compliance program, CP 7382.850, organizes device inspections into six QMS areas: change control; design and development; management oversight; measurement, analysis and improvement; outsourcing and purchasing; and production and service provision (FDA CP 7382.850). Production and service provision is where process validation, environmental controls, equipment, labeling and traceability are examined. Outsourcing and purchasing covers your contract manufacturers and critical suppliers, which for many small firms is most of the supply chain.

For companies selling outside the US, the EU MDR adds its own manufacturing obligations, including notified body audits and EUDAMED registration. Mandatory use of the first EUDAMED modules began on May 28, 2026 (HPRA).

1. Tariffs and the pending Section 232 investigation

The Commerce Department opened a Section 232 national security investigation into imports of medical devices, PPE and related equipment on September 2, 2025, with a Federal Register notice following on September 26 (Federal Register). As of April 2026 it remained unresolved. MedTech Dive reported that PwC’s Thomas Hunzinger estimated tariff costs of roughly $200 million to $500 million a year for the largest device companies, while KPMG observed that reshoring is happening, but “not at a scale that replaces established global networks” (MedTech Dive).

For manufacturers, the practical effect is supplier change. Moving a component or process to a new site is a change under QMSR that needs evaluation, possible revalidation and, in some cases, a new 510(k). Tariff-driven sourcing decisions are therefore quality decisions too.

2. Reshoring and a growing domestic workforce

The Bureau of Labor Statistics shows employment in miscellaneous manufacturing (NAICS 339, which includes medical equipment and supplies) at 612,000 in September 2026, a preliminary figure (BLS). New or expanded US sites bring new process validations, new supplier qualifications and new people to train, all of which FDA will examine under the production and the outsourcing and purchasing areas.

3. Automation and smart factories

Deloitte’s 2025 Smart Manufacturing Survey found that 92% of manufacturers see smart manufacturing as the main driver of competitiveness over the next three years, reported output gains of up to 20%, and found 29% using AI or machine learning at the facility or network level (Deloitte). The survey covers manufacturing broadly, not only devices. Trade press has also reported device makers moving toward highly automated “dark factory” lines, though those accounts rely largely on company claims (Medical Technology).

The regulatory side has caught up. FDA’s Computer Software Assurance guidance, first finalized September 24, 2025 and updated February 3, 2026, sets a risk-based approach for validating production and quality system software, including automation tools (FDA). One caution: FDA’s Advanced Manufacturing Technologies designation program applies to drugs and biologics, not devices.

4. A smaller FDA

FDA cut about 3,500 staff in 2025 (MedTech Dive), including more than 220 CDRH positions (Star Tribune). In April 2026, MedTech Dive reported that the agency had lost roughly 21% of its staff and that reviewer feedback had become less consistent (MedTech Dive). Fewer inspections do not mean lower standards: when an inspection happens, documentation has to answer the investigator’s questions quickly and completely.

5. More unannounced foreign inspections

In May 2025, FDA announced expanded use of unannounced inspections at foreign facilities, noting that serious deficiencies were found at foreign sites “more than twice as often” as at US sites (FDA). Emergo by UL confirmed that the policy applies to device manufacturers (Emergo). If your contract manufacturer is overseas, its inspection readiness is now your risk.

Medical device manufacturing readiness checklist

Regulatory foundation

  • Establishment registered and devices listed for the current fiscal year
  • Quality manual and procedures mapped to ISO 13485:2016 and Part 820, not legacy QSR section numbers
  • Medical device file complete for each device family

Production and process controls

  • Every process assessed for qualification, verification or validation, with rationale recorded
  • Process validations current after any equipment, site, material or software change
  • Production and automation software validated using a risk-based CSA approach
  • Labeling and packaging inspection and release documented per §820.45, including UDI checks
  • Device history and traceability records complete for sampled lots

Suppliers and contract manufacturers

  • Suppliers classified by risk, with controls proportionate to risk
  • Quality agreements require change notification and inspection cooperation
  • Supplier audit reports written as if FDA will read them, because it can
  • Tariff-driven supplier or site changes run through change control with regulatory impact assessed

Inspection readiness

  • Records organized by FDA’s six QMS areas
  • Management review, internal audit and CAPA records current and specific
  • Foreign sites prepared for unannounced inspections

Turn documentation into evidence

Manufacturing documentation keeps growing: validation protocols, supplier files, change records, labeling records. AI document assessment can read these against ISO 13485, QMSR and your own procedures, flag gaps, and cite the passage behind every finding, so your team spends its time fixing issues rather than searching for them.

Run a sample regulatory document assessment on one process validation or supplier file. AskDona shows the evidence; your quality team decides.

FAQ

What regulation governs medical device manufacturing in the US? The Quality Management System Regulation (21 CFR Part 820), effective February 2, 2026, which incorporates ISO 13485:2016 by reference (FDA).

Do contract manufacturers need to comply with QMSR? Contract manufacturers of finished devices are subject to Part 820 and must register. The brand owner also remains responsible for controlling them through purchasing controls.

Must every manufacturing process be validated? FDA states that “all processes require some degree of qualification, verification, or validation” (Federal Register). The level should match the risk.

Are medical devices subject to new tariffs? A Section 232 investigation into medical device imports opened in September 2025. Check its current status before making sourcing decisions (Federal Register).

References

All pages opened and checked by October 13, 2026.

SourceTypeDateUsed for
FDA: Quality System (QS) Regulation / QMSRRegulator2026QMSR effective date
Federal Register: QMSR final ruleRegulationFeb 2, 2024Process validation quotes
eCFR: 21 CFR Part 820RegulationCurrent§820.45
FDA: QMSR FAQRegulator2026Records visibility
FDA: CP 7382.850RegulatorFeb 2, 2026Six QMS areas
FDA: Overview of Device RegulationRegulatorCurrentCore obligations
Federal Register: FY2027 device user feesRegulator2026Registration fee
SelectUSA: Medical Technology IndustryGovernmentDec 2024Jobs, exports, establishments
AdvaMed: Job creationTrade association2021 dataJobs, firm size
BLS: NAICS 339GovernmentSep 2026 (prelim.)Employment
Federal Register: Section 232 noticeGovernmentSep 26, 2025Tariff investigation
MedTech Dive: One year in, tariffsTrade pressApr 2026Tariff costs, reshoring
Deloitte: 2025 Smart Manufacturing SurveyConsultancy survey2025Automation adoption
Medical Technology: Dark factory shiftTrade pressFeb 2026Automation examples (company claims)
FDA: CSA guidanceRegulator guidanceFeb 3, 2026Software validation
MedTech Dive: FDA layoffsTrade pressMay 6, 2025Staff cuts
Star Tribune: FDA layoffsNewsApr 8, 2025CDRH cuts
MedTech Dive: CDRH workloadsTrade pressApr 1, 2026Staff loss, feedback
FDA: Unannounced foreign inspectionsRegulatorMay 6, 2025Foreign inspections
Emergo by UL: Unannounced inspectionsConsultancyMay 8, 2025Applies to devices
HPRA: EUDAMED mandatory modulesRegulator (EU)2026EUDAMED