Published: 5th October 2026
Reviewed by: David Small BSc (Hons), MSc, MTOPRA (Founder and CEO)
Understanding FDA Medical Device Regulations
The United States is one of the world’s largest medical device markets, but manufacturers must navigate a regulatory framework that differs significantly from the systems used in the UK and European Union.
Medical devices marketed in the United States are regulated by the U.S. Food and Drug Administration (FDA), primarily through the Center for Devices and Radiological Health (CDRH). CDRH regulates organisations involved in manufacturing, repackaging, relabelling and importing medical devices sold in the United States.
For manufacturers, achieving FDA compliance involves much more than simply registering a company or listing a device. Depending on the type and classification of the device, manufacturers may need to establish the appropriate regulatory pathway, demonstrate that applicable safety and effectiveness requirements have been met, implement a compliant Quality Management System, meet labelling and Unique Device Identification requirements and establish appropriate post-market processes.
The exact route depends heavily on the device itself.
This guide explains the principal FDA medical device requirements manufacturers should understand when preparing to enter the US market.
Who Regulates Medical Devices in the United States?
The FDA is responsible for regulating medical devices throughout their lifecycle.
Within FDA, CDRH is responsible for most medical devices and radiation-emitting electronic products.
The regulatory framework includes requirements covering areas such as:
- Device classification
- Premarket submissions
- Quality management systems
- Establishment registration
- Device listing
- Labelling
- Unique Device Identification (UDI)
- Medical Device Reporting
- Corrections and removals
- Post-market surveillance
- FDA inspections
For manufacturers outside the United States, additional requirements can apply, including designation of a U.S. Agent.
Understanding which requirements apply begins with establishing whether the product is an FDA-regulated medical device and determining its correct classification.
Is Your Product a Medical Device Under FDA Regulations?
Before considering FDA registration or a 510(k) submission, manufacturers should establish whether their product falls within the US definition of a medical device.
This assessment should consider the product’s intended use, indications for use, mechanism of action and the claims made by the manufacturer.
Products close to the boundary between medical devices, medicines, combination products, wellness products and other regulated categories may require particularly careful assessment.
Software can also qualify as a medical device depending on its intended purpose and functionality.
Correctly determining regulatory status at the beginning of a US market-entry project is important because it establishes which FDA regulatory framework applies.
FDA Medical Device Classification: Class I, Class II and Class III
FDA classifies medical devices according to the regulatory controls considered necessary to provide reasonable assurance of their safety and effectiveness.
There are three main classes:
FDA classification | General regulatory level | Typical pathway |
Class I | Lowest regulatory control | Often exempt from premarket notification, although applicable requirements still apply |
Class II | Moderate regulatory control | Frequently 510(k), unless exempt |
Class III | Highest regulatory control | Frequently Premarket Approval (PMA) |
FDA has classified approximately 1,700 generic types of medical devices and groups them into 16 medical specialty panels.
Classification should not be based solely on assumptions about risk.
Manufacturers should identify the applicable FDA regulation, classification, product code and any relevant special controls or exemptions.
This is particularly important for manufacturers already selling devices in Europe or the UK. An EU MDR or UK MDR classification cannot simply be converted into an FDA classification.
Finding the Correct FDA Product Code
FDA product codes play an important role in determining the regulatory requirements applicable to a device.
The product code can help identify:
- Device classification
- Applicable regulation
- Medical specialty panel
- Whether a 510(k) may be required
- Whether the device may be exempt
- Applicable special controls
- Potential predicate devices
Selecting an inappropriate product code can result in manufacturers pursuing the wrong regulatory strategy.
A careful classification assessment should therefore be performed before preparing a premarket submission.
What Are the Main FDA Premarket Pathways?
Not every medical device follows the same route to the US market.
Depending on classification, novelty, risk and existing legally marketed devices, the principal pathways can include:
510(k) Premarket Notification
The 510(k) pathway is commonly associated with Class II devices.
A 510(k) submission generally seeks to demonstrate that a new device is substantially equivalent to an appropriate legally marketed predicate device.
This requires considerably more than identifying a similar product. Manufacturers need to compare intended use and technological characteristics and provide appropriate evidence supporting substantial equivalence.
De Novo Classification Request
The De Novo pathway can provide a route for certain novel devices for which there is no legally marketed predicate but for which general controls, or general and special controls, can provide reasonable assurance of safety and effectiveness.
A successful De Novo request creates a new device classification that can subsequently provide a basis for future devices of the same type.
Premarket Approval (PMA)
PMA is generally associated with Class III devices and represents FDA’s most stringent premarket review pathway for medical devices.
Manufacturers need to provide sufficient valid scientific evidence to demonstrate reasonable assurance of the device’s safety and effectiveness for its intended use.
Premarket Exempt Devices
Some devices are exempt from 510(k) requirements.
However, 510(k) exemption does not mean exemption from FDA regulation.
Other applicable requirements may still include establishment registration, device listing, quality system requirements, labelling, UDI and post-market obligations.
510(k) Clearance Is Not the Same as FDA Approval
One of the most common terminology mistakes made by manufacturers is describing a 510(k)-cleared device as “FDA approved.”
FDA uses different regulatory terminology depending on the pathway.
A successful 510(k) results in FDA clearance, while a successful PMA results in FDA approval.
Similarly, registering an establishment or listing a device with FDA does not constitute approval of either the company or its products. FDA expressly states that establishment registration, assignment of a registration number or device listing does not denote FDA approval.
Manufacturers should therefore ensure that marketing materials and regulatory claims accurately reflect the status of their device.
What Evidence May Be Required for FDA Submission?
The evidence required depends on the device and regulatory pathway.
Depending on the technology, manufacturers may need to consider:
- Bench performance testing
- Biocompatibility
- Electrical safety
- Electromagnetic compatibility
- Software verification and validation
- Cybersecurity
- Usability and human factors
- Sterilisation validation
- Packaging validation
- Shelf-life evidence
- Clinical evidence
- Risk management
FDA-recognised consensus standards may play an important role in demonstrating conformity with relevant requirements.
Evidence requirements should ideally be identified early in the regulatory strategy rather than after submission preparation has begun.
FDA Quality Management System Regulation (QMSR)
A major change to US medical device regulation took effect on 2 February 2026.
FDA’s revised 21 CFR Part 820 is now known as the Quality Management System Regulation (QMSR).
The QMSR incorporates ISO 13485:2016 by reference, bringing the FDA quality management framework into closer alignment with the internationally recognised medical device quality management standard.
This is particularly significant for manufacturers already operating an ISO 13485 Quality Management System for the UK, EU or other international markets.
However, manufacturers should not assume that ISO 13485 certification alone automatically demonstrates complete FDA compliance.
US-specific regulatory requirements continue to apply and should be incorporated appropriately into the manufacturer’s Quality Management System.
The QMSR applies to finished device manufacturers intending to commercially distribute medical devices, subject to applicable provisions and exemptions.
Understanding ISO 13485 for Medical Device Manufacturers?
ISO 13485 is the internationally recognised quality management system standard for medical device manufacturers and has become increasingly important for companies navigating FDA requirements. For an overview of the standard, its key requirements, and how it applies to medical device manufacturers, read our Complete Guide to ISO 13485.
FDA Inspections Under the QMSR
The introduction of QMSR also changed FDA’s medical device inspection approach.
On 2 February 2026, FDA stopped using the Quality System Inspection Technique (QSIT) and began using the inspection process described in its updated Inspection of Medical Device Manufacturers Compliance Program.
Manufacturers should therefore ensure that their Quality Management System is not only documented but implemented effectively and capable of withstanding regulatory inspection.
For manufacturers already certified to ISO 13485, an FDA-focused gap assessment can help identify additional US requirements that may need to be incorporated into the existing system.
FDA Establishment Registration and Device Listing
Organisations involved in producing and distributing medical devices intended for commercial distribution in the United States may be required to register their establishments with FDA.
Most establishments required to register must also list the devices and activities performed at the establishment. Registration is generally renewed annually.
It is important to distinguish between:
Establishment registration – identifies the relevant establishment to FDA.
Device listing – identifies devices associated with the establishment and its activities.
Neither process should be confused with FDA clearance or approval.
U.S. Agent Requirements for Foreign Medical Device Manufacturers
Foreign medical device establishments exporting devices to the United States must identify a U.S. Agent as part of establishment registration.
The U.S. Agent acts as a point of contact between FDA and the foreign establishment.
FDA states that each foreign establishment may designate only one U.S. Agent. The agent’s details are submitted electronically through FDA’s registration and listing system, and the U.S. Agent must confirm that they have agreed to act in this capacity.
For UK and European manufacturers entering the US market, appointing an appropriate U.S. Agent should therefore form part of the regulatory market-entry plan.
Medical Device Labelling Requirements
Medical device labelling for the United States must meet applicable FDA requirements.
Depending on the device, this can include requirements concerning:
- Device identity
- Intended use
- Instructions for use
- Warnings and precautions
- Manufacturer information
- Prescription device statements
- Unique Device Identification
- Other device-specific information
Manufacturers entering the United States from the UK or EU should not assume that existing CE or UKCA labelling will automatically meet FDA requirements.
A US-specific labelling review should therefore form part of market-entry preparation.
Unique Device Identification (UDI)
FDA’s Unique Device Identification system is designed to provide consistent identification of medical devices through distribution and use.
Depending on the device and applicable requirements, manufacturers may need to assign an appropriate UDI, apply it to device labels and packaging and submit required device information to FDA’s Global Unique Device Identification Database (GUDID).
UDI requirements should be considered as part of the overall US market-entry strategy rather than treated as an administrative step after clearance.
Post-Market Requirements for Medical Devices
FDA compliance continues after a medical device reaches the US market.
Manufacturers need systems capable of identifying, investigating and responding to post-market information.
Applicable obligations can include:
- Complaint handling
- Medical Device Reporting
- Corrections and removals
- CAPA
- Post-market surveillance
- Record keeping
- Device tracking where applicable
- Quality system monitoring
The Medical Device Reporting regulation under 21 CFR Part 803 requires manufacturers, importers and device user facilities to report specified device-related adverse events and product problems.
Manufacturers generally must report qualifying deaths, serious injuries and certain malfunctions within 30 calendar days of becoming aware of the event, with certain circumstances requiring a five-working-day report.
Post-market compliance should therefore be designed into the manufacturer’s quality and regulatory systems before commercial launch.
Common FDA Compliance Mistakes
Manufacturers entering the United States frequently encounter avoidable regulatory problems.
Common examples include:
- Assuming EU or UK classification applies in the US
- Selecting an incorrect FDA product code
- Assuming every Class II device follows exactly the same pathway
- Choosing an inappropriate predicate for a 510(k)
- Underestimating testing requirements
- Preparing regulatory documentation before establishing a clear FDA strategy
- Assuming ISO 13485 certification alone means the QMS is fully FDA compliant
- Treating establishment registration as FDA approval
- Using “FDA approved” incorrectly in marketing materials
- Failing to prepare appropriately for FDA post-market obligations
- Leaving UDI, labelling or registration considerations until the end of the project
Addressing these issues early can significantly reduce regulatory uncertainty, unnecessary testing and delays.
FDA Medical Device Compliance for UK and EU Manufacturers
Manufacturers familiar with UKCA marking or EU CE marking should recognise that FDA regulation represents a separate regulatory system.
There may be substantial overlap in supporting evidence and quality documentation, particularly where internationally recognised standards are used.
However, manufacturers should not assume that an existing EU MDR or UK MDR technical file can simply be submitted to FDA.
Differences can exist in:
- Classification
- Regulatory pathways
- Submission structure
- Terminology
- Evidence expectations
- Quality system requirements
- Labelling
- Registration
- Post-market reporting
A structured FDA gap assessment can identify which existing documentation can be leveraged and what additional evidence or documentation is required.
How Long Does FDA Medical Device Compliance Take?
There is no single FDA compliance timeline.
Timescales depend on factors including:
- Device classification
- Regulatory pathway
- Availability of a suitable predicate
- Required testing
- Clinical evidence requirements
- Software complexity
- Quality system maturity
- Existing technical documentation
- FDA review questions
Manufacturers should therefore develop their FDA regulatory strategy early, particularly where additional testing or clinical evidence may be required.
Do You Need FDA Support?
Entering the US medical device market requires manufacturers to coordinate regulatory strategy, classification, evidence generation, quality management and FDA administrative requirements.
Patient Guard can support manufacturers with areas including:
- FDA regulatory strategy
- Medical device classification
- Product code identification
- 510(k) preparation and support
- De Novo strategy
- QMSR readiness
- ISO 13485 implementation and gap assessment
- Technical documentation review
- Risk management
- Clinical and biological evaluation
- Software medical device compliance
- FDA establishment registration and device listing support
- U.S. market-entry planning
Establishing the correct regulatory pathway at the beginning of a project can help manufacturers avoid unnecessary work and develop a clearer route to the US market.
Planning Your Route to the US Medical Device Market
FDA compliance should be approached as a regulatory lifecycle rather than a single submission.
The process begins with understanding the device and its intended use, establishing the correct classification and product code, determining the appropriate regulatory pathway and identifying the evidence required to support market entry.
Manufacturers must then consider QMSR compliance, establishment registration, device listing, labelling, UDI and the systems necessary to maintain compliance once the device is commercially available.
For UK and European manufacturers in particular, existing ISO 13485 systems and regulatory documentation may provide a valuable foundation — but the US requirements need to be assessed independently.
A well-defined FDA regulatory strategy at the beginning of the project can provide a much clearer and more efficient path to the US market.
Frequently Asked Questions About FDA Medical Device Regulations
No. The regulatory pathway depends on the device. Some devices may be exempt from premarket notification, many Class II devices require 510(k) clearance, while certain Class III devices require PMA approval.
No. A successful 510(k) results in FDA clearance, not FDA approval.
No. FDA explicitly states that establishment registration or device listing does not denote approval.
QMSR incorporates ISO 13485:2016 by reference, but manufacturers must also account for applicable US-specific FDA requirements.
Foreign establishments involved in manufacturing devices imported into the United States must identify a U.S. Agent as part of their FDA establishment registration.
No. FDA has its own classification system. Manufacturers should determine the appropriate FDA classification and product code independently.
Yes. Applicable requirements can include complaint handling, Medical Device Reporting, corrections and removals and other quality and post-market obligations.
References
This guide is based primarily on official U.S. Food and Drug Administration (FDA) guidance and regulatory information relating to medical device classification, premarket pathways, quality management systems, establishment registration, device listing, U.S. Agent requirements, labelling, Unique Device Identification (UDI) and post-market obligations.
| Organisation | Reference | Why it's relevant |
|---|---|---|
| U.S. Food and Drug Administration (FDA) | Classify Your Medical Device | Provides FDA guidance on the Class I, Class II and Class III classification system, the regulatory controls associated with each class and how classification affects the premarket requirements applicable to a medical device. |
| U.S. Food and Drug Administration (FDA) | Device Classification Panels | Explains how FDA classifies medical devices into medical specialty panels and how manufacturers can identify the applicable classification regulation and marketing requirements. |
| U.S. Food and Drug Administration (FDA) | Premarket Notification 510(k) | Provides FDA guidance on the 510(k) pathway, including when a premarket notification is required and the requirement to demonstrate substantial equivalence to an appropriate legally marketed predicate device. |
| U.S. Food and Drug Administration (FDA) | De Novo Classification Request | Describes the De Novo pathway for certain novel medical devices for which there is no legally marketed predicate but where general controls, or general and special controls, can provide reasonable assurance of safety and effectiveness. |
| U.S. Food and Drug Administration (FDA) | Premarket Approval (PMA) | Explains FDA's Premarket Approval pathway for Class III medical devices and the requirement for sufficient valid scientific evidence to provide reasonable assurance of device safety and effectiveness. |
| U.S. Food and Drug Administration (FDA) | Quality Management System Regulation (QMSR) | Sets out FDA's Quality Management System Regulation, which became effective on 2 February 2026. QMSR incorporates ISO 13485:2016 by reference and aligns FDA's medical device quality management requirements more closely with the international standard while retaining applicable FDA-specific requirements. |
| U.S. Food and Drug Administration (FDA) | Quality Management System Regulation – Frequently Asked Questions | Provides further FDA information on implementation of QMSR, incorporation of ISO 13485:2016 and the FDA inspection approach under the revised quality management framework. |
| U.S. Food and Drug Administration (FDA) | Device Registration and Listing | Explains FDA establishment registration and device listing requirements for organisations involved in the production and distribution of medical devices intended for the United States. |
| U.S. Food and Drug Administration (FDA) | U.S. Agents | Sets out requirements relating to U.S. Agents for foreign medical device establishments and explains the U.S. Agent's role as a point of contact between FDA and the foreign establishment. |
| U.S. Food and Drug Administration (FDA) | Device Labeling | Provides an overview of FDA medical device labelling requirements and relevant provisions of Title 21 of the Code of Federal Regulations. |
| U.S. Food and Drug Administration (FDA) | General Device Labeling Requirements | Provides further information on general medical device labelling requirements under 21 CFR Part 801, including device identification and manufacturer or distributor information. |
| U.S. Food and Drug Administration (FDA) | UDI Basics | Explains FDA's Unique Device Identification system, including requirements for UDIs on applicable device labels and packages and submission of device information to the Global Unique Device Identification Database (GUDID). |
| U.S. Food and Drug Administration (FDA) | Summary of Medical Device Reporting Requirements | Summarises Medical Device Reporting requirements, including circumstances in which manufacturers must report device-related deaths, serious injuries and qualifying malfunctions. |
| U.S. Food and Drug Administration (FDA) | Recalls, Corrections and Removals (Devices) | Explains FDA requirements relating to medical device recalls, corrections and removals, including relevant manufacturer and importer reporting obligations. |
FDA medical device requirements depend on the individual device, its intended use, classification, product code and applicable regulatory pathway. Manufacturers should confirm current FDA requirements and device-specific controls when developing a US market-entry strategy.
Patient Guards Recent Posts
FDA Medical Device Regulations: A Complete Guide for Manufacturers
Planning to place a medical device on the US market? This complete guide explains FDA medical device regulations, including device classification, 510(k), De Novo and PMA pathways, QMSR and ISO 13485, establishment registration, device listing, U.S. Agent requirements, UDI and post-market obligations.
How to Become NHS Procurement Ready: From DTAC to NHS Market Access
Preparing to sell digital health technology to the NHS requires more than completing DTAC. This guide explains how manufacturers can build a procurement-ready position by aligning regulatory compliance, clinical safety, data protection, cybersecurity, interoperability, accessibility and commercial evidence for NHS market access.
DCB0129 and Clinical Safety: What Digital Health Manufacturers Need for NHS DTAC
For digital health manufacturers preparing to enter the NHS, clinical safety can be one of the most important—and sometimes misunderstood—parts of DTAC.
It is not enough to demonstrate that your software works.
Manufacturers need to consider what could happen if the technology fails, produces incorrect information, presents information incorrectly, contributes to a workflow error or is used in circumstances that could expose patients to harm.
This is where clinical risk management and DCB0129 become particularly important.
NHS England identifies DCB0129 as the clinical risk management standard for manufacturers of health IT systems. Its counterpart, DCB0160, applies to health organisations deploying and using health IT systems. NHS England states that compliance with these standards is required under the Health and Social Care Act 2012.
For manufacturers working towards NHS DTAC readiness, understanding the distinction—and having the right clinical safety evidence—is essential.
Patient Guards Related Services
Need Training?
Do you need training on Quality Management Systems or EU MDR/ EU IVDR? then check out our training courses.
