QMS/GMP Compared: FDA QMSR, Brazil RDC 665, Mexico NOM-241 & China
Legal-text comparison of medical device quality systems: FDA 21 CFR Part 820 (QMSR), Brazil RDC 665/2022, Mexico NOM-241-SSA1-2025, and China Order 53 — scope, certification, and audit.
Four QMS Regimes Converging on ISO 13485 — From Four Different Directions
Every major medical-device market now requires a documented quality management system before a device can be lawfully placed on the market, but the four most influential texts reach that destination by different routes: the FDA's Quality Management System Regulation (21 CFR Part 820, the "QMSR"), Brazil's good-manufacturing resolution (ANVISA RDC 665/2022), Mexico's manufacturing standard (NOM-241-SSA1-2025), and China's production-supervision measures (Order 53) plus the new GMP guidance (Order 107). All four increasingly orbit ISO 13485:2016 and the MDSAP, yet each keeps a distinct certification object, issuer, and validity period.
This is a regulatory-research comparison for compliance planning, not quality-system advice for a specific site. Verify every hook against the official text listed at the end.
Side-by-Side: Scope, Certificate, and Audit
| Dimension | FDA (US) | Brazil (ANVISA) | Mexico (COFEPRIS) | China (NMPA) |
|---|---|---|---|---|
| Legal text | 21 CFR Part 820 (QMSR), effective Feb 2, 2026 | RDC 665/2022 (BGMP) + RDC 687/2022 (cert issuance) | NOM-241-SSA1-2025, effective Nov 30, 2025 | Medical Device Production Supervision Measures (Order 53, 2022) + GMP Guidance (Order 107, 2025) |
| Foundation | ISO 13485:2016 incorporated by reference (§820.7) | Brazilian GMP — similar but not identical to ISO 13485 | Risk-based GMP; aligns with ISO 13485 / MDSAP / IMDRF N47 | Domestic GMP; references ISO 13485, EU MDR, FDA QMSR; YY/T 0287-2017 (= ISO 13485) |
| Certification object | No certificate — compliance enforced by inspection | BGMP certificate (mandatory for Class III/IV) | GMP certificate of conformity for Mexico-based manufacturers | Medical Device Manufacturing License (Class II/III); Class I = filing |
| Who issues / enforces | FDA (inspection, no ISO cert issued) | ANVISA (issuing); MDSAP reports accepted | COFEPRIS (certification); MDSAP accepted as equivalent (Nov 2025) | NMPA + provincial drug regulators |
| Validity | Unlimited (ongoing inspection) | 2 years; up to 4 years if based on MDSAP | Per sanitary-registration cycle | Manufacturing license 5 years |
| MDSAP role | FDA is an MDSAP participating authority | MDSAP audit reports accepted for BGMP | MDSAP accepted as equivalent to NOM-241 QMS requirements | NMPA reserves the right to inspect; MDSAP not a substitute |
| Scope of firms | Manufacturers (domestic & foreign) | Manufacturers, importers, distributors, storers | Manufacturers + distributors/importers located in Mexico | Manufacturers; overseas sites assessed at registration |
FDA: 21 CFR Part 820 — From QSR to QMSR
On February 2, 2026, the FDA's long-standing Quality System Regulation (the "QSR") was replaced by the Quality Management System Regulation (QMSR), finalized February 2, 2024 after a two-year transition.
- §820.7 — Incorporation by reference: the QMSR incorporates ISO 13485:2016 (and ISO 9000:2015 for definitions) by reference, so the substance of ISO 13485 is now US law for devices.
- Retained US-only clauses: the rule keeps the Part 820 scope and certain definitions and adds §§820.10 (QMS requirements), 820.15 (clarification of concepts), 820.35 (control of records), and 820.45 (device labeling and packaging) to preserve FD&C Act alignment.
- No certificate, no exemption: the FDA does not issue ISO 13485 certificates, does not exempt ISO-certified firms from inspection, and will not issue certificates of conformance at inspection. The QSIT inspection technique was withdrawn on the effective date.
Cross-market trap: an ISO 13485 certificate is now evidence of US compliance, but it is not a pass. Firms that treat QMSR as "we already have ISO 13485, so we are done" still face unannounced FDA inspections against the same clauses — and the recordkeeping (§820.35) and labeling/packaging (§820.45) hooks are US-specific overlays ISO 13485 alone does not fully describe.
Brazil: RDC 665/2022 and the BGMP Certificate Gate
Brazil is the only one of the four that makes a government-issued GMP certificate a hard precondition for registering higher-risk devices.
- RDC 665/2022 (published March 30, 2022; effective May 2, 2022) establishes the Brazilian Good Manufacturing Practices (BGMP) for medical devices and IVDs, covering design, purchasing, manufacture, packaging, labeling, storage, distribution, installation, and service. It revoked RDC 16/2013 and IN 8/2013 with no change in substantive merit — a format-harmonization consolidation.
- Scope of firms: manufacturers and importers, plus distributors and storers operating in Brazil. Class III and IV manufacturers must be BGMP-certified, and a Registro (registration) can only be granted to a holder with a valid BGMP certificate.
- RDC 687/2022 governs issuing and renewing the BGMP certificate (revoking RDC 183/2017), with a published risk matrix deciding desk-review vs on-site inspection.
- Validity and renewal: BGMP certificates are valid 2 years; validity is extended to up to 4 years when based on MDSAP audit reports, and ANVISA accepts MDSAP reports for issuing/renewing GMP certificates. If the GMP certificate lapses, the device registration becomes invalid — renewal must be filed at least 180 days before expiry.
Cross-market trap: ANVISA explicitly does not accept a bare ISO 13485 certificate or another country's GMP certificate as a substitute for the BGMP process — only an MDSAP audit report (which ANVISA reviews against RDC 665/2022) shortens the path. Firms counting on their FDA QMSR or EU ISO 13485 to satisfy Brazil will hit a wall at Registro.
Mexico: NOM-241-SSA1-2025 and the MDSAP Equivalence
Mexico's manufacturing standard moved from a 2021 version to a risk-based 2025 text, and late 2025 COFEPRIS formally recognized MDSAP as equivalent.
- NOM-241-SSA1-2025 was published April 4, 2025 and took effect November 30, 2025 (some sources cite Dec 1, 2025), canceling and replacing NOM-241-SSA1-2021. It sets minimum requirements for establishments that design, develop, manufacture, store, and distribute medical devices in Mexico.
- Applicability: mandatory for manufacturers, distributors/importers located in Mexico. Manufacturers outside Mexico registering products in Mexico present GMP certificates from their home jurisdiction.
- MDSAP equivalence: on November 11, 2025, COFEPRIS published interpretation criteria confirming that ISO 13485 clauses, MDSAP audit processes, and GMP expectations from reference authorities are equivalent to NOM-241-SSA1-2025 QMS requirements — applicable to any site, in Mexico or abroad, regardless of commercial destination.
- Structure: includes dedicated chapters on stability studies (14), product recall (15), subcontracted activities (16), and good storage/distribution practices (18), with partial concordance to IMDRF/GRRP WG/N47 (2024) essential principles.
Cross-market trap: the MDSAP equivalence is a recognition, not a repeal. Mexico-based manufacturers still need a COFEPRIS certificate of conformity to NOM-241; an MDSAP certificate satisfies the QMS substance but the local certification step remains. And the standard's recall chapter (15) interacts with Mexico's separate technovigilance rule (NOM-240-SSA1-2012), so a field action triggers both.
China: Order 53 (Manufacturing License) + Order 107 (New GMP)
China separates the legal authorization to manufacture (a license) from the quality-system standard (the GMP), and both tightened recently.
- Medical Device Production Supervision and Administration Measures (Order 53, 2022): to manufacture Class II or III devices, an entity must obtain a Medical Device Manufacturing License from the provincial drug regulator; Class I requires only a filing. Licenses are valid 5 years; changes to manufacturing address or scope trigger a license-amendment review with on-site inspection (Articles 13–15).
- New GMP — Guidance for Medical Device Production Quality Management (Order 107, 2025): revises the 2014 GMP (Order 64), to be fully implemented November 1, 2026. It adds Quality Assurance as a core governance function and a Validation and Verification chapter, referencing ISO 13485, EU MDR, and FDA QMSR/QSR.
- Underlying standard: YY/T 0287-2017 is China's adopted version of ISO 13485; an ISO 13485 certificate is typically submitted as proof of QMS at registration, but NMPA reserves the right to conduct for-cause and overseas on-site inspections — it is rare but not waived.
Cross-market trap: China's "license" (Order 53) and "GMP" (Order 107) are two different filings aimed at two different things — authorization to operate vs the quality standard applied. A foreign manufacturer can hold an ISO 13485 certificate and still face an NMPA registration-quality inspection, and a local Chinese OEM partner is separately licensed under Order 53, so quality agreements and audit coordination sit across both instruments.
What to Verify in the Original Text
- 21 CFR Part 820, §§820.7, 820.10, 820.35, 820.45: confirm the ISO 13485:2016 incorporation by reference, the effective date (Feb 2, 2026), the retained recordkeeping and labeling/packaging clauses, and that no certificate is issued at inspection.
- RDC 665/2022 (BGMP scope) and RDC 687/2022 (cert issuance): confirm the Class III/IV BGMP-certification gate, the 2-year (up to 4-year MDSAP) validity, the lapsed-certificate registration consequence, and that ISO 13485/other GMP certificates are not substitutes.
- NOM-241-SSA1-2025 (effective Nov 30, 2025) and the November 11, 2025 COFEPRIS interpretation criteria: confirm applicability to Mexico-located firms, the MDSAP/ISO 13485 equivalence, and the interaction with NOM-240-SSA1-2012 (technovigilance) on the recall chapter.
- Order 53 (2022, Production Supervision Measures), Articles 5, 13–15, and the new GMP guidance Order 107 (2025, effective Nov 1, 2026): confirm the Class II/III licensing vs Class I filing split, the 5-year license validity, and that ISO 13485/YY/T 0287-2017 is proof-of-QMS but not a waiver of NMPA inspection rights.
Practical Implications for a Multi-Site Quality Strategy
For a manufacturer selling in all four markets, the convergence toward ISO 13485 and MDSAP is real but incomplete. The FDA QMSR now rewards an existing ISO 13485 system without issuing a certificate; Brazil still demands its own BGMP certificate (or an MDSAP report reviewed against RDC 665/2022) and ties registration survival to certificate validity; Mexico accepts MDSAP/ISO 13485 as equivalent substance but keeps a local certification step; and China separates the manufacturing license (Order 53) from the GMP (Order 107) and retains inspection discretion. The single most efficient move is a single MDSAP-audited ISO 13485 system as the global backbone — it satisfies the US, shortens Brazil and Mexico, and supports China — while still budgeting for ANVISA BGMP certification, the COFEPRIS local certificate, and the NMPA license/inspection track that MDSAP cannot replace. Confirm the QMSR effective-date transition, the NOM-241-2025 applicability, and the China Order 107 (Nov 1, 2026) implementation against the official texts before relying on any single certificate across borders.
Sources
- US FDA / eCFR, 21 CFR Part 820 — Quality Management System Regulation (QMSR): https://www.ecfr.gov/current/title-21/chapter-I/subchapter-H/part-820 ; FDA, Medical Devices; Quality System Regulation Amendments (final rule): https://www.federalregister.gov/documents/2024/02/02/2024-01809
- ANVISA, Resolução RDC nº 665, de 30 de março de 2022 — Boas Práticas de Fabricação (BGMP): https://www.in.gov.br/en/web/dou/-/resolucao-rdc-n-665-de-30-de-marco-de-2022-389909119
- COFEPRIS / Diario Oficial de la Federación, NOM-241-SSA1-2025, Buenas prácticas de fabricación de dispositivos médicos: https://www.dof.gob.mx/normasOficiales/9497/salud/salud.html
- NMPA (China), Provisions for Supervision and Administration of Medical Device Manufacturing (Order 53, 2022): https://english.nmpa.gov.cn/2022-09/30/c_961744.htm ; NMPA, Revision and Release of the Good Manufacturing Practice for Medical Devices (Order 107, 2025): https://english.nmpa.gov.cn/2025-11/07/c_1138710.htm