The FDA rules for medical device manufacturing require you to classify your device by risk, clear the correct premarket submission pathway, run a compliant quality management system, register your establishment and list the device, label each unit with a unique device identifier, and keep meeting reporting, tracking, and recall obligations after the product reaches the market. The specifics scale with risk: a tongue depressor and an implantable pacemaker sit under the same framework but face very different burdens. Getting classification wrong at the start distorts every decision that follows, so the sequence below matters.
Classify the Device First
Under 21 CFR Part 860, every device falls into one of three risk classes, and the class determines the submission pathway, the evidence you must gather, and how closely the FDA watches the product later.1eCFR. 21 CFR Part 860 – Medical Device Classification Procedures
- Class I covers the lowest-risk products, such as elastic bandages and tongue depressors. They face only general controls (labeling, good manufacturing practices), and almost all are exempt from 510(k) premarket notification.2Food and Drug Administration. Medical Device Exemptions 510(k) and GMP Requirements
- Class II covers moderate-risk products like powered wheelchairs, infusion pumps, and surgical drapes. They require general controls plus special controls such as performance standards, specific labeling, or post-market surveillance. Most reach the market through 510(k).
- Class III covers devices that sustain life, prevent serious health impairment, or carry a significant risk of injury, including implantable pacemakers and replacement heart valves. They generally require Premarket Approval supported by clinical trial data.
Choose the Right Premarket Pathway
Three routes lead to commercial sale. The right one depends on the device’s class and whether something similar is already legally marketed.
510(k) Premarket Notification
The 510(k) is the standard route for Class II devices. You must show the device is “substantially equivalent” to a legally marketed predicate: same intended use, and either the same technological characteristics or different ones that do not raise new safety questions.3Food and Drug Administration. Premarket Notification 510(k) The submission includes side-by-side technological comparisons and performance test data. A “not substantially equivalent” determination pushes you toward a longer, more expensive path that may require clinical evidence or reclassification.
Premarket Approval (PMA)
Class III devices generally need a PMA, the most demanding application the FDA reviews. You must submit valid scientific evidence that benefits outweigh risks, with full reports of nonclinical laboratory studies and clinical investigations in human subjects, plus a complete device description, manufacturing methods, and proposed labeling.4Food and Drug Administration. PMA Application Contents Expect substantially longer timelines and higher costs than a 510(k).
De Novo Classification
The De Novo pathway is for novel devices with no predicate but low-to-moderate risk that does not justify a PMA. You can file a De Novo request after receiving a “not substantially equivalent” determination on a 510(k), or directly if there is clearly no predicate. The request must explain why general controls alone, or general and special controls together, provide reasonable assurance of safety and effectiveness. All De Novo requests must be submitted electronically through the FDA’s eSTAR template. The FDA’s target review time is 150 days, though holds for additional information stop the clock. Once granted, the device can serve as a predicate for future 510(k) submissions.5Food and Drug Administration. De Novo Classification Request
If You Need Human Clinical Data: The IDE
When a PMA or De Novo submission requires clinical evidence, you must first obtain an Investigational Device Exemption to legally study the product in human subjects. An approved IDE allows the device to be shipped and used for investigation without a cleared 510(k) or approved PMA.6U.S. Food and Drug Administration. Investigational Device Exemption (IDE)
The FDA distinguishes significant risk from nonsignificant risk studies. A significant risk device is intended as an implant, represented as life-sustaining, or otherwise presents potential for serious harm. Those studies require full FDA IDE approval before enrollment. Nonsignificant risk studies can start once an institutional review board approves the protocol, without a separate FDA application. Both types require informed consent and investigational labeling. IDE sponsors are exempt from most quality system requirements except design controls.
Run a Compliant Quality Management System
Every facility that manufactures finished devices for commercial distribution must operate under a quality management system that complies with 21 CFR Part 820.7eCFR. 21 CFR Part 820 – Quality Management System Regulation The rule changed significantly on February 2, 2026, when the FDA replaced the former Quality System Regulation with the Quality Management System Regulation (QMSR), which incorporates ISO 13485:2016 by reference.8Food and Drug Administration. Quality Management System Regulation – Frequently Asked Questions
If you already hold ISO 13485 certification, the change removes the need to maintain parallel documentation for separate U.S. and international standards. Where any clause of ISO 13485 conflicts with the Federal Food, Drug, and Cosmetic Act, the statute controls.9Food and Drug Administration. Quality Management System Regulation (QMSR) The FDA also retired the old Quality System Inspection Technique (QSIT) on the same date. Under the new inspection program, investigators may review management review records, internal quality audits, and supplier audit reports, all of which were previously shielded.8Food and Drug Administration. Quality Management System Regulation – Frequently Asked Questions
Two Files You Must Maintain
The Design History File (DHF) documents the entire development process and shows the design was developed to plan and verified through testing. The Device Master Record (DMR) contains every specification and instruction needed to build the device, from blueprints and material lists to packaging and labeling. The DMR is the definitive production blueprint, and any deviation triggers nonconformance procedures.
Label Devices With a Unique Device Identifier
Most medical devices must carry a Unique Device Identifier on the label, made up of two parts:10Food and Drug Administration. UDI Basics
- A device identifier (DI), which is a fixed code identifying the manufacturer and the specific model or version.
- A production identifier (PI), which is a variable code capturing lot or batch number, serial number, expiration date, or manufacturing date.
You must submit DI data to the Global Unique Device Identification Database (GUDID). Entries can be made one at a time through the GUDID web application or uploaded in bulk through the FDA Electronic Submissions Gateway. The FDA is transitioning GUDID to require Global Medical Device Nomenclature (GMDN) codes, so use those rather than the older FDA Preferred Term codes.11Food and Drug Administration. Global Unique Device Identification Database (GUDID)
Register the Establishment and List the Device
Every owner or operator of a facility that manufactures, repackages, relabels, or distributes medical devices for the U.S. market must register through the FDA Unified Registration and Listing System (FURLS), using the Device Registration and Listing Module.12Food and Drug Administration. How to Register and List The process runs in two steps: pay the annual user fee, then submit facility information and list every device you market.
For fiscal year 2026, the annual establishment registration fee is $11,423 per facility.13Food and Drug Administration. Medical Device User Fee Amendments (MDUFA) Fees Registration information must be reviewed and resubmitted between October 1 and December 31 each year, even when nothing has changed. Registrations remain active through the calendar year, but missing the renewal window can lead to detention of products shipped in interstate commerce.14U.S. Food and Drug Administration. When to Register and List
Foreign Manufacturers: The U.S. Agent
Foreign companies whose devices are imported into the United States register through the same system and pay the same fee, and they must also designate a U.S. Agent. The agent must reside or maintain a place of business in the United States and be available by phone during normal business hours. The agent helps the FDA communicate with the foreign establishment, respond to questions about imported devices, and schedule inspections. The U.S. Agent has no responsibility for reporting adverse events or filing premarket notifications; those stay with the foreign manufacturer.15Food and Drug Administration. U.S. Agents
Fee Relief for Small Manufacturers
The Small Business Determination (SBD) program cuts fees meaningfully for companies that qualify. FY 2026 thresholds:16Food and Drug Administration. Reduced or Waived Medical Device User Fees – SBD Program
- Gross receipts of $100 million or less (including affiliates): 75% reduction on submission fees. The standard 510(k) fee of $26,067 drops to $6,517, and the standard PMA fee of $579,272 drops to $144,818.13Food and Drug Administration. Medical Device User Fee Amendments (MDUFA) Fees
- $30 million or less: full waiver on the first premarket application or report, such as a first PMA.
- $1 million or less: possible waiver of the annual establishment registration fee, but only with proof of financial hardship and a prior year’s registration fee payment.
Small business status must be renewed each fiscal year. For FY 2026, requests are accepted from August 1, 2025 through September 30, 2026 for submission fee reductions, and through October 31, 2025 for registration fee waivers. One expensive trap: if you submit an application before receiving your SBD determination, you pay the full fee, and the FDA will not refund the difference.16Food and Drug Administration. Reduced or Waived Medical Device User Fees – SBD Program
Post-Market Obligations
Regulatory duties continue after the sale. Under 21 CFR Part 803, manufacturers must report adverse events through the Medical Device Reporting (MDR) system. If a device may have caused or contributed to a death or serious injury, you must file a report within 30 calendar days of becoming aware of the event.17eCFR. 21 CFR Part 803 – Medical Device Reporting Malfunctions that would likely cause death or serious injury if they recurred must be reported on the same timeline.18Food and Drug Administration. Medical Device Reporting (MDR) – How to Report Medical Device Problems
Certain high-risk devices carry additional tracking duties under 21 CFR Part 821. Devices whose failure would be reasonably likely to have serious health consequences, devices intended for implantation longer than one year, and life-sustaining devices used outside a healthcare facility must all be tracked from production to the individual patient.19eCFR. 21 CFR Part 821 – Medical Device Tracking Requirements The tracking system must let you locate affected units quickly if a safety problem emerges.20Food and Drug Administration. Medical Device Tracking
Missing these reporting obligations is a prohibited act under the Federal Food, Drug, and Cosmetic Act and can bring warning letters, product seizures, injunctions, or criminal prosecution.21Office of the Law Revision Counsel. 21 USC 331 – Prohibited Acts
Recalls
When a marketed device turns out to be defective or in violation of FDA regulations, the manufacturer is expected to initiate a recall. Most recalls are voluntary, though the FDA retains authority to order one.22Food and Drug Administration. Recalls, Corrections and Removals (Devices) The FDA classifies recalls by hazard severity:23eCFR. 21 CFR 7.3 – Definitions
- Class I: reasonable probability of serious health consequences or death.
- Class II: possible temporary or medically reversible adverse effects, or remote probability of serious harm.
- Class III: not likely to cause adverse health consequences.
Separately, under 21 CFR Part 806, manufacturers and importers must report any correction or removal to their FDA district office within 10 working days if the action was taken to reduce a health risk or remedy a violation that may present one. The report must identify the device, describe the problem, detail the corrective action, and account for affected units in distribution. Thorough distribution records, combined with tracking under Part 821 for devices covered by it, make this the difference between a contained correction and a prolonged crisis.