Research
The quality system behind an injector pen
The rules for making a medical device are no longer written out in the Code. They point at an international standard instead, and the parts that stayed behind say a lot about what the agency wanted to keep in its own words.
A part that mostly points somewhere else
Part 820 of title 21 is headed Quality Management System Regulation. It governs how devices are designed, made, packaged, labeled, stored, installed and serviced.
Anyone opening it expecting a long list of manufacturing requirements will be surprised. Several of its entries are marked Reserved: section 820.5, the block covering sections 820.20 through 820.30, and section 820.40.
What sits in those gaps is now an international standard, incorporated by reference. Section 820.7 names it and gives the ordering details, and identifies which sections of the part each incorporated document is approved for.
That standard is copyrighted and is not reproduced here, on the same principle this site applies to pharmacopeial chapters. So what follows describes the structure and the requirements the Code kept in its own words, and does not characterize the standard's contents.
Who it applies to, and who it does not
Section 820.1 is unusually specific about reach, and the specificity is the useful part.
The requirements "govern the methods used in, and the facilities and controls used for, the design, manufacture, packaging, labeling, storage, installation, and servicing of all finished devices intended for human use."
It then names roles many people would not think of as manufacturing. Those subject to the part "include, but are not limited to, manufacturers that perform the functions of contract sterilization, installation, relabeling, remanufacturing, repacking, or specification development." The list closes with "initial distributors of foreign entities that perform these functions."
Specification development is worth pausing on. A company that designs a device and has somebody else build it is inside the part.
And there is a line at the other end. The provisions "do not apply to manufacturers of components or parts of finished devices," though such manufacturers "are encouraged to consider provisions of this regulation as appropriate."
The obligation also scales. A manufacturer that "engages in only some operations subject to the requirements in this part, and not in others" need comply only with the requirements applicable to what it does.
What a failure makes the device
Section 820.10 sets out the duty to document a quality management system, and closes with a sentence about consequences.
"The failure to comply with any applicable requirement in this part renders a device adulterated under section 501(h) of the Federal Food, Drug, and Cosmetic Act."
And it names who is exposed. "Such a device, as well as any person responsible for the failure to comply, is subject to regulatory action."
That is the same construction the drug side uses. A process failure is not merely a process failure; it changes the legal status of the article that came out of it.
The section also stitches the incorporated standard back into other parts of title 21. It names unique device identification, traceability, reporting to regulatory authorities and advisory notices as places where the Code's own separate requirements also apply.
The record fields the agency wrote out longhand
Section 820.35 is where the Code stops pointing and starts specifying, which is a signal in itself. It lists fields a record must carry.
Three kinds of complaint are covered: one that must be reported, one a manufacturer decides to investigate, and one it investigates anyway. The record must include the name of the device, "The date the complaint was received," any unique device identifier or universal product code, and "The name, address, and phone number of the complainant."
It must also include "The nature and details of the complaint," any correction or corrective action taken, and "Any reply to the complainant."
For servicing, the fields are the device name, its identifiers, "The date of service," "The individual(s) who serviced the device," the service performed, and "Any test and inspection data."
There is also an explicit rule about not investigating twice. Where an investigation has already been performed for a similar complaint, another is not necessary, but the manufacturer "shall maintain records documenting justification for not performing such investigation."
The line back to the public information rules
Section 820.35 ends with one short paragraph that connects this part to a completely different area of law.
Records "deemed confidential by the manufacturer may be marked to aid FDA in determining whether information may be disclosed under the public information regulation in part 20 of this chapter."
The wording is careful and worth reading closely. Marking aids a determination. It does not make one.
That matches part 20 itself, which states that marking records as confidential raises no obligation on the agency to treat them as confidential or to withhold them. A separate piece here covers that machinery.
Labeling is treated as a control problem
Section 820.45 covers device labeling and packaging, and its structure says what the risk is understood to be.
A manufacturer must document procedures giving "a detailed description of the activities to ensure the integrity, inspection, storage, and operations for labeling and packaging," across processing, storage, handling, distribution and use.
Labeling must be examined for accuracy before release or storage, and the section lists what accuracy means here: the correct identifier, "Expiration date," "Storage instructions," "Handling instructions," and "Any additional processing instructions."
And the operations themselves must be run "to prevent mixups, including, but not limited to, inspection of the labeling and packaging before use to assure that all devices have correct labeling and packaging."
Mixup is the same word and the same concern that runs through the drug and supplement labeling rules covered elsewhere on this site. The wrong label on the right product is the failure everyone is designing against.
Why this belongs on a peptide comparison site
Because delivery hardware is part of what people buy, and because the vocabulary shows up in marketing.
A pen, an autoinjector or a needle system supplied as part of a product can bring this part into play, and the specification developer is covered even when somebody else does the building.
Nothing here classifies any product sold in this market as a device. Whether a given article is one, and whether it is part of a combination product, is determined under separate rules covered in companion pieces.
Two limits are worth stating plainly rather than leaving implied. The incorporated standard was not read, so nothing above describes what any of its clauses require. And no manufacturer's actual system, inspection outcome or record was examined, because none of that is in the Code.
This is a summary of a regulation, not legal advice and not an assessment of any seller.
Key takeaways
- Part 820 now incorporates an international standard by reference, leaving several of its own entries marked Reserved.
- That standard is copyrighted, so this page describes only the requirements the Code states in its own words.
- The part reaches specification developers and relabelers, not only the factory that assembles the device.
- Failing an applicable requirement renders the device adulterated under the statute.
- The Code writes out complaint and servicing record fields longhand, including who complained and what reply was sent.
- Labeling is treated as a mixup-prevention problem, with pre-release examination of expiry, storage and handling text.
Frequently asked questions
Why does part 820 look so short?
Because much of it now points at an international standard incorporated by reference under section 820.7 rather than restating requirements. Several entries in the part are marked Reserved, including section 820.5, the block covering sections 820.20 through 820.30, and section 820.40. The standard is copyrighted, so its text is not reproduced here and nothing above characterizes what its clauses require.
Does a company that only designs a device fall under these rules?
Yes. Section 820.1 states that manufacturers subject to the part include, but are not limited to, those performing contract sterilization, installation, relabeling, remanufacturing, repacking, or specification development. It also names initial distributors of foreign entities performing those functions. Specification development covers designing a device and having somebody else build it.
What happens if a manufacturer does not comply?
Section 820.10 states that failure to comply with any applicable requirement in the part renders a device adulterated under section 501(h) of the Federal Food, Drug, and Cosmetic Act. The device and any person responsible for the failure are subject to regulatory action. It is a change in the article's legal status, not only a process finding.
What has to be written down about a complaint?
Section 820.35 lists the fields. They are the name of the device, the date the complaint was received, any unique device identifier or universal product code, and the name, address and phone number of the complainant. Also the nature and details of the complaint, any correction or corrective action taken, and any reply to the complainant. Where a similar complaint was already investigated, a further investigation is not required, but the justification for not performing one must be documented.
Can a manufacturer keep its records out of public view by marking them confidential?
Marking helps the agency decide; it does not decide. Section 820.35 says records deemed confidential by the manufacturer may be marked to aid FDA in determining whether information may be disclosed under the public information regulation in part 20. Part 20 itself provides that marking records as confidential raises no obligation to regard them as confidential or to withhold them.
Sources
Each document below is named as it names itself, with the date printed on that document rather than the day it was read.
- Title 21 Code of Federal Regulations section 820.1, Scope — Electronic Code of Federal Regulations, Office of the Federal Register, February 2024
- Title 21 Code of Federal Regulations section 820.7, Incorporation by reference — Electronic Code of Federal Regulations, Office of the Federal Register, February 2024
- Title 21 Code of Federal Regulations section 820.10, Requirements for a quality management system — Electronic Code of Federal Regulations, Office of the Federal Register, February 2024
- Title 21 Code of Federal Regulations section 820.35, Control of records — Electronic Code of Federal Regulations, Office of the Federal Register, February 2024
- Title 21 Code of Federal Regulations section 820.45, Device labeling and packaging controls — Electronic Code of Federal Regulations, Office of the Federal Register, February 2024