FDA Medical Device Recalls: Complete Guide to Corrections, Removals, and Recall Classification (21 CFR 7, 806, 810)
Comprehensive guide to FDA medical device recalls — voluntary vs mandatory recalls, Class I/II/III classification, corrections and removals under 21 CFR 806, reporting requirements, recall strategy, health hazard evaluation, and compliance best practices.
What Is a Medical Device Recall?
A medical device recall is a firm's removal or correction of a marketed device that the FDA considers to be in violation of the laws it administers, or that presents a risk of injury or gross deception. It is the primary mechanism through which unsafe or non-compliant devices are identified and addressed after they have entered the market.
Most recalls are conducted voluntarily by manufacturers and distributors. The FDA does not order most recalls — instead, firms identify problems through their quality systems, complaint handling, or post-market surveillance and initiate corrective action. However, the FDA has the authority to request a recall and, in rare but serious cases, to order a mandatory recall under 21 CFR Part 810.
A recall does not always mean patients must stop using the device or return it. Many recalls involve inspections, labeling corrections, or software updates that can be performed in the field.
Key Definitions
| Term | Definition | Example |
|---|---|---|
| Recall | Firm's correction or removal of a marketed device that violates FDA law or poses a health risk | A manufacturer replaces defective batteries in an implanted neurostimulator |
| Correction | Repair, modification, adjustment, relabeling, or inspection of a device without removing it from its point of use | A software patch deployed remotely to fix a dosing calculation error |
| Removal | Physical removal of a device from its point of use to another location for repair, modification, or destruction | A hospital returns a defective surgical instrument to the manufacturer |
| Market withdrawal | Correction or removal involving a minor violation not subject to FDA legal action, or no violation at all | Routine stock rotation, or a product pulled due to a labeling typo that does not affect safety |
| Stock recovery | Correction or removal of a device that has not been marketed or left the direct control of the firm | A manufacturer retrieves devices from its own warehouse before shipping |
Key distinction: A recall is the umbrella term. The operational actions are usually a correction or a removal. 21 CFR Part 806 determines whether your correction or removal must be reported to the FDA.
Legal Framework
FDA medical device recalls are governed by three separate regulations, each addressing a different aspect:
21 CFR Part 7 — Voluntary Recalls (Enforcement Policy)
Part 7 establishes the FDA's policies for overseeing voluntary recalls of all regulated products, including medical devices. Key provisions:
- Section 7.40-7.59: Describe the FDA's role in monitoring recalls, classifying them, and assessing their effectiveness
- Section 7.46: Firms are requested to report corrections or removals to their FDA District Recall Coordinator as soon as possible
- Part 7 does not require recalls — it defines how the FDA manages them once initiated
21 CFR Part 806 — Reports of Corrections and Removals
Part 806 is the medical device-specific regulation requiring manufacturers and importers to report certain corrections and removals to the FDA:
- Section 806.10: Requires written reports within 10 working days of initiating a correction or removal that was undertaken to reduce a risk to health or to remedy a violation that may present a risk to health
- Section 806.20: Requires maintaining records of all corrections and removals, even those not required to be reported
- Section 806.10(f): Exemptions — no report is required if the information has already been submitted under 21 CFR Part 803 (Medical Device Reporting)
21 CFR Part 810 — Mandatory Device Recalls
Part 810 gives the FDA authority to order mandatory recalls when voluntary action is insufficient:
- Section 810.3: The FDA may order a recall if there is a reasonable probability that a device would cause serious adverse health consequences or death
- Section 810.7: The FDA must first give the firm an opportunity to initiate a voluntary recall
- Mandatory recall authority derives from Section 518(e) of the Federal Food, Drug, and Cosmetic Act (FD&C Act), which authorizes the FDA to order a device recall when there is a reasonable probability that the device would cause serious adverse health consequences or death
FDA Recall Classification
After a firm initiates a recall, the FDA reviews the action and assigns a classification based on the health hazard it presents:
Class I Recall
Definition: A situation in which there is a reasonable probability that the use of, or exposure to, a violative product will cause serious adverse health consequences or death.
Examples:
- Implantable defibrillators with defective leads that may fail to deliver therapy
- Anesthesia machines with a software defect that could deliver incorrect gas concentrations
- Surgical mesh with contamination that could cause life-threatening infections
FDA actions: Public notification via press release, FDA website posting, and Medical Device Recall Database entry. Direct notification to healthcare professionals and facilities.
Class II Recall
Definition: A situation in which use of, or exposure to, a violative product may cause temporary or medically reversible adverse health consequences, or where the probability of serious adverse health consequences is remote.
Examples:
- Infusion pumps with a display error that could lead to incorrect programming (low probability of serious harm)
- Sterilization packaging with a seal integrity issue that affects a limited batch
- Diagnostic test kits with calibration drift that could produce slightly inaccurate results
FDA actions: Posting in the Medical Device Recall Database. May issue safety communications depending on the circumstances.
Class III Recall
Definition: A situation in which use of, or exposure to, a violative product is not likely to cause adverse health consequences.
Examples:
- Labeling with incorrect lot number formatting (correct lot is identifiable by other means)
- Minor cosmetic defects on device housing that do not affect function
- Documentation errors in the IFU that do not affect instructions for safe use
FDA actions: Recorded in the recall database. Typically no public notification.
Classification Summary
| Class | Health Hazard | Probability | FDA Response | Public Notification |
|---|---|---|---|---|
| I | Serious adverse health consequences or death | Reasonable probability | Press release, database, direct outreach | Yes — mandatory |
| II | Temporary or medically reversible consequences | Possible | Database posting, possible safety comm | Often |
| III | Not likely to cause adverse health consequences | Remote | Database entry only | No |
Voluntary vs Mandatory Recalls
Voluntary Recalls
The vast majority of medical device recalls are voluntary. A manufacturer or distributor initiates the action after identifying a problem through:
- Complaint trending and analysis
- Post-market surveillance data
- Notified Body or FDA inspection findings
- CAPA investigations
- Supplier notifications
- Internal audits
The FDA expects firms to have written procedures for initiating and executing recalls. Once a firm notifies the FDA of a recall, the FDA assigns a recall coordinator who monitors the firm's progress and classifies the recall.
Mandatory Recalls (21 CFR Part 810)
The FDA can order a mandatory device recall when:
- There is a reasonable probability that the device would cause serious adverse health consequences or death (Section 518(e) of the FD&C Act)
- The firm has not adequately addressed the risk voluntarily
- The FDA determines that a recall is necessary to protect public health
The mandatory recall process:
- FDA notifies the firm of the opportunity for an informal hearing
- If the firm does not voluntarily recall, FDA issues a recall order
- The firm must submit a written recall strategy
- The firm must comply with ongoing reporting requirements
- FDA monitors effectiveness
Mandatory recalls are rare but carry significant enforcement consequences for non-compliance.
Corrections and Removals Reporting (21 CFR Part 806)
When You Must Report (Section 806.10)
You must submit a written report to the FDA within 10 working days of initiating a correction or removal if the action was undertaken to:
- Reduce a risk to health posed by the device, OR
- Remedy a violation of the FD&C Act caused by the device that may present a risk to health
What to Include in the Report
The report must contain:
- The brand name, common name, classification, and product code of the device
- The identity of the device (model/catalog number, lot/serial number)
- The reason for the correction or removal
- A description of the event(s) that led to the correction or removal
- The number of devices subject to the correction or removal
- The date of the correction or removal
- The distribution pattern (wholesale, retail, hospital, etc.)
- A copy of any communication sent to customers
When You Do NOT Need to Report
A report under Part 806 is not required if:
- The information has already been submitted under 21 CFR Part 803 (Medical Device Reporting)
- The action is a market withdrawal or stock recovery
- The correction or removal was initiated by an FDA order under 21 CFR Part 810
Record Keeping (Section 806.20)
Even for corrections and removals not required to be reported, you must maintain records containing:
- Device identification (brand name, classification, product code)
- The reason for the action
- The number of devices involved
- The date of the action
- Records must be available for FDA inspection
Health Hazard Evaluation (HHE)
When a firm initiates a recall, the FDA conducts a Health Hazard Evaluation to determine the recall classification. The HHE considers:
- Whether any disease or injuries have already occurred from the device
- Whether any existing conditions could contribute to a more serious health hazard
- Assessment of the degree of hazard — the nature and severity of the potential health problem
- The likelihood that the hazard will occur — probability of exposure
- The consequences (immediate and long-term) of the hazard
- The population at risk — patients, users, healthcare professionals
The HHE is the basis for the FDA's classification decision. It is a risk-based assessment that considers both the severity of potential harm and the probability of occurrence.
The Risk-Effectiveness (REF) Rule
When evaluating whether a recall is warranted and how it should be classified, the FDA applies a benefit-risk framework. The key question is whether the risks presented by the device outweigh its benefits, and whether the recall action effectively mitigates those risks.
Recall Strategy
When a firm initiates a recall, it must develop a recall strategy that the FDA reviews and may modify. The strategy defines:
Depth of Recall
| Level | Scope | When Used |
|---|---|---|
| Consumer / Patient | Reaching end users directly | Class I recalls, implantable devices |
| Retail / User Facility | Reaching hospitals, clinics, pharmacies | Most Class I and II recalls |
| Distributor / Wholesale | Reaching intermediaries only | Limited distribution devices, Class III recalls |
| Consignee | Reaching specific known recipients | Targeted corrections |
Effectiveness Checks
The firm must verify that the recall is effective — that consignees have been notified and have taken appropriate action. Effectiveness checks include:
- Direct contact — phone calls, emails, or letters to consignees
- Response tracking — monitoring the percentage of consignees who acknowledge and comply
- Follow-up — escalating to additional outreach for non-responsive consignees
The FDA expects effectiveness check results to be documented and available for review.
Public Notification
The firm must prepare a communication to affected customers that includes:
- Description of the device and the problem
- Instructions for identifying affected units (lot numbers, serial numbers)
- Recommended actions (return, inspect, modify, destroy)
- Contact information for the recalling firm
- A statement that the recall is being conducted with FDA knowledge
Recall Process Step-by-Step
Step 1: Problem Identification
A potential device problem is identified through complaints, MDR reports, internal testing, supplier notification, post-market surveillance, or regulatory inspection.
Step 2: Risk Assessment
The manufacturer evaluates the health risk using its quality system risk management process. This assessment determines whether a correction or removal is needed and whether it is reportable under 21 CFR 806.
Step 3: Decision to Recall
Based on the risk assessment, management decides to initiate a voluntary recall. A recall coordinator is designated internally.
Step 4: Notify the FDA
Contact the FDA District Recall Coordinator as soon as possible. Submit the written report under 21 CFR 806.10 within 10 working days.
Step 5: Develop Recall Strategy
Define the depth, scope, and communication plan. Submit the strategy to the FDA for review.
Step 6: Notify Consignees
Send recall notifications to all affected customers and consignees at the depth specified in the strategy.
Step 7: Conduct Effectiveness Checks
Verify that consignees received the notification and are taking appropriate action.
Step 8: FDA Classification
The FDA reviews the health hazard and assigns a classification (I, II, or III).
Step 9: Corrective Action
Implement the correction (repair, relabel, software update) or removal (return, replacement, destruction).
Step 10: Recall Termination
When the FDA determines the recall has been effective, it issues a termination notice. All recall records are archived.
FDA Medical Device Recall Database
The FDA maintains a public Medical Device Recall Database that contains all recalls classified since November 2002. The database is searchable at FDA Medical Device Recalls.
What the database contains:
- Recall number and date
- Classification (I, II, or III)
- Product description
- Recalling firm
- Reason for the recall
- Action taken
- Number of units affected
Important notes:
- The posting date reflects when the FDA classified the recall, not necessarily when it was initiated
- Class I and some Class II recalls also appear as FDA Safety Communications
- The database is separate from the MAUDE database (which tracks adverse event reports)
Relationship to Medical Device Reporting (21 CFR Part 803)
Recalls and MDR reporting are related but distinct obligations:
| Aspect | Recall (21 CFR 7/806) | MDR (21 CFR 803) |
|---|---|---|
| Purpose | Remove or correct violative devices | Report adverse events to FDA |
| Trigger | Device violates FDA law or poses health risk | Death, serious injury, or reportable malfunction |
| Timing | Report within 10 working days (806.10) | Report within 30 calendar days (or 5 days for urgent) |
| Scope | All affected devices in distribution | Individual events |
| Overlap | An MDR reportable event may trigger a recall | A recall may generate additional MDR reports |
Key point: If you have already submitted an MDR report under 21 CFR Part 803 for the same event, you are not required to submit a separate 806 report (21 CFR 806.10(f)). However, the underlying correction or removal must still be executed.
EU Comparison: Field Safety Corrective Actions (FSCA)
The EU equivalent of a recall is the Field Safety Corrective Action (FSCA), governed by MDR Articles 89-90 and detailed in MDCG 2024-2 (Guidance on vigilance for medical devices), which covers vigilance reporting requirements.
Key Differences
| Aspect | US Recall | EU FSCA |
|---|---|---|
| Legal basis | 21 CFR 7, 806, 810 | MDR Articles 87-90 |
| Definition | Correction or removal of violative device | Corrective action to prevent/reduce risk of serious incident |
| Reporting to | FDA District Recall Coordinator | Competent Authorities via EUDAMED Vigilance Module |
| Timeline | 10 working days (806.10) | Without delay (immediate for serious threat to public health: 2 days; death/serious deterioration: 10 days; other serious incidents: 15 days) |
| Public notification | Recall database | Field Safety Notice (FSN) to users |
| Classification | FDA assigns Class I/II/III | Manufacturer assesses; CA may review |
| Trend reporting | Not required under recall regulations | Required under Article 88 (statistically significant increase in non-serious incidents) |
FSCA Process Under EU MDR
- Manufacturer identifies risk through PMS activities
- Initiates FSCA — may include device return, exchange, modification, retrofit, or recall
- Notifies relevant Competent Authorities without delay
- Prepares a Field Safety Notice (FSN) and communicates to affected users
- Uploads FSCA report via EUDAMED Vigilance Module
- Monitors effectiveness of corrective actions as part of PMS
Common Reasons for Medical Device Recalls
Analysis of FDA recall data shows these are the most frequent causes:
- Software defects — Incorrect algorithms, user interface errors, cybersecurity vulnerabilities, connectivity failures
- Manufacturing deviations — Process control failures, contamination, incorrect assembly
- Labeling errors — Wrong IFU, missing warnings, incorrect UDI, incorrect symbols
- Design issues — Inadequate design verification, material incompatibility, mechanical failures
- Sterility and contamination — Packaging failures, sterilization process deviations, environmental monitoring excursions
- Component failures — Supplier quality issues, out-of-specification raw materials
Prevention Strategies
To minimize recall risk, manufacturers should implement:
- Robust design controls — Thorough design verification and validation before market release
- Comprehensive complaint handling — Systematic evaluation of all complaints for MDR reportability and recall triggers
- Proactive post-market surveillance — Detecting trends before they escalate to recall-level events
- Supplier quality management — Qualifying and monitoring critical suppliers
- Software lifecycle management — Following IEC 62304 for software development and maintenance
- Effective CAPA systems — Addressing root causes, not just symptoms
- Labeling controls — Document control and verification procedures for all labeling changes
- Regular internal audits — Identifying and correcting potential issues before they affect the market
Recent Recall Trends
FDA medical device recalls have remained at historically high levels. Key trends include:
- 3,934 devices were recalled from FY2020 through FY2024, all of which were voluntary — the FDA did not order any mandatory recalls during this period
- Class I recalls increased 64.76% since 2016, reflecting both more aggressive enforcement and growing device complexity
- Software-related recalls continue to increase as devices become more connected and software-dependent
- Cybersecurity recalls are a growing category as FDA strengthens pre-market and post-market cybersecurity expectations
- Global supply chain disruptions have contributed to manufacturing-related recalls
- In December 2025, the GAO published report GAO-26-107619 identifying FDA recall oversight limitations, including the agency's inability to meet its 3-month recall termination goal for the majority of recalls
- In September 2025, CDRH expanded its Communications Pilot to cover all medical devices, improving the timeliness and reach of recall-related safety communications
Frequently Asked Questions
Is a recall always initiated by the FDA?
No. Most recalls are voluntary — initiated by the manufacturer or distributor. The FDA rarely orders mandatory recalls, but has the authority to do so under 21 CFR Part 810.
What is the difference between a correction and a removal?
A correction fixes a device at its current location (repair, software update, relabeling). A removal physically takes the device from where it is being used or distributed.
Do I need to report a market withdrawal to the FDA?
No. A market withdrawal involves a minor violation that would not be subject to FDA legal action, or no violation at all (e.g., normal stock rotation). It is not reportable under 21 CFR Part 806.
How quickly must I report a correction or removal?
Within 10 working days of initiating the action, if it was undertaken to reduce a risk to health or remedy a violation that may present a risk to health (21 CFR 806.10).
What if I already filed an MDR report?
If you have already submitted the required information under 21 CFR Part 803 (MDR), you do not need to submit a separate report under Part 806 (21 CFR 806.10(f)). However, you still need to maintain records.
How does the FDA classify recalls?
The FDA conducts a Health Hazard Evaluation (HHE) considering: whether injuries have occurred, the severity of the hazard, the probability of occurrence, and the population at risk. Based on this assessment, the recall is assigned Class I, II, or III.
What is a recall strategy?
A recall strategy defines the depth of the recall (how far into the distribution chain to go), how to notify affected parties, and how to verify that the recall is effective.
Do we need to notify patients directly?
For Class I recalls involving devices used by patients directly (e.g., home-use devices, implants), the FDA may require patient-level notification. The recall strategy specifies the required depth.
What records must we maintain for non-reportable corrections and removals?
Under 21 CFR 806.20, you must maintain records of all corrections and removals, including device identification, reason for the action, number of devices, date, and any communications sent.
How does an FSCA in the EU differ from an FDA recall?
An FSCA (Field Safety Corrective Action) under the EU MDR is similar in concept but involves notification to Competent Authorities, communication via Field Safety Notice, and reporting through the EUDAMED Vigilance Module. The MDR also requires trend reporting for increases in non-serious incidents, which has no direct equivalent in US recall regulations.
Can a recall be terminated?
Yes. The FDA terminates a recall when it determines that all reasonable efforts have been made to remove or correct the device and that it is no longer likely that remaining product poses a health risk.
What are the consequences of failing to report a recall?
Failure to comply with 21 CFR Part 806 reporting requirements can result in FDA Warning Letters, consent decrees, import alerts, and in severe cases, criminal prosecution. The FDA takes recall reporting obligations seriously and routinely cites firms for late or missing reports.
Related Guides
- CAPA for Medical Devices Guide — Implementing an effective Corrective and Preventive Action system to prevent recall-triggering issues.
- Post-Market Surveillance Guide — PMS plans, periodic safety update reports, and trend reporting obligations.
- Medical Device Adverse Event Reporting Guide — FDA MDR and EU vigilance reporting requirements, timelines, and best practices.
- FDA MAUDE Database Guide — How to search and analyze the FDA's adverse event database for recall signals.
- Medical Device Quality Audits Guide — Comprehensive guide to quality system audits that help identify recall risks early.