Insights/Regulatory Update/FDA Post-Market Surveillance Requirements: A Complete Guide for Medical Device Manufacturers
Regulatory Update

FDA Post-Market Surveillance Requirements: A Complete Guide for Medical Device Manufacturers

By TrueMedDevice TeamFebruary 18, 20267 min read

What Is FDA Post-Market Surveillance?

Post-market surveillance (PMS) is the systematic process of monitoring the safety and performance of medical devices after they have been cleared or approved for market. The U.S. Food and Drug Administration (FDA) requires manufacturers, importers, and device user facilities to actively monitor their devices throughout the entire product lifecycle — not just during premarket review.

FDA post-market surveillance applies to all device classes authorized through 510(k) clearance, PMA approval, De Novo classification, or humanitarian device exemption. The legal foundation spans multiple sections of Title 21 of the Code of Federal Regulations (CFR), with the most critical being 21 CFR 803 (Medical Device Reporting), 21 CFR 806 (Corrections and Removals), and 21 CFR 822 (Postmarket Surveillance Studies).

The Regulatory Framework

21 CFR 803 — Medical Device Reporting (MDR)

The MDR regulation is the cornerstone of FDA post-market surveillance. It requires manufacturers to report to FDA when they become aware that a device may have caused or contributed to a death or serious injury, or when a device malfunctions in a way that would likely cause or contribute to a death or serious injury if the malfunction were to recur. Reports are submitted through the MAUDE database.

21 CFR 806 — Reports of Corrections and Removals

When a manufacturer or importer initiates a correction (repair, modification, adjustment, relabeling) or removal (withdrawal from market) to reduce a health risk, they must report this action to FDA within 10 working days. This includes voluntary recalls that address potential risks to health.

21 CFR 822 — Postmarket Surveillance Studies

FDA can order manufacturers of certain Class II and Class III devices to conduct postmarket surveillance studies. These prospective studies monitor long-term device performance and safety, typically spanning 36 months with cohorts that can exceed 10,000 patients. FDA orders these studies when there are questions about device performance that can only be answered through real-world surveillance data.

QMSR — Quality Management System Regulation (Effective February 2, 2026)

The Quality Management System Regulation (QMSR) replaces the current Quality System Regulation (QSR) at 21 CFR 820. QMSR aligns FDA requirements with ISO 13485:2016 and introduces explicit post-market surveillance process requirements linked to risk management and corrective action. Under QMSR, manufacturers must demonstrate that PMS outputs feed directly into their risk management files and CAPA processes.

Who Must Comply

FDA post-market surveillance obligations apply to three categories of regulated entities:

  • Manufacturers (domestic and foreign): Must report MDRs, maintain complaint handling systems, conduct trend analysis, and implement PMS plans. Foreign manufacturers exporting to the U.S. have the same obligations as domestic firms.
  • Importers: Must forward complaints to manufacturers and submit their own MDR reports to FDA when they become aware of reportable events.
  • Device User Facilities (hospitals, ambulatory surgical facilities, nursing homes): Must report device-related deaths to both FDA and the manufacturer within 10 working days, and serious injuries to the manufacturer within 10 working days.

Key Requirements by Category

Requirement CFR Reference What's Required Timeline
MDR — Deaths 21 CFR 803.50 Report to FDA any death reasonably related to the device 30 days (5 days if emergent)
MDR — Serious Injury 21 CFR 803.50 Report to FDA any serious injury caused or contributed to by the device 30 days
MDR — Malfunction 21 CFR 803.50 Report if malfunction could cause death or serious injury if it recurred 30 days
Corrections/Removals 21 CFR 806.10 Report corrections or removals initiated to reduce health risk 10 working days
Complaint Handling 21 CFR 820.198 / QMSR Document, investigate, and determine if complaint is MDR-reportable Ongoing
Trend Analysis FDA Guidance Systematic analysis of complaint, MDR, and field safety trends Periodic
CAPA 21 CFR 820.90 / QMSR Corrective and preventive actions driven by PMS data As needed
PMS Studies 21 CFR 822 Prospective surveillance studies when ordered by FDA Per FDA order

Reporting Timelines

  1. 5-day reports: Events that require remedial action to prevent an unreasonable risk of substantial harm to public health, or events for which FDA has requested 5-day reports.
  2. 30-day reports: Standard MDR reports for deaths, serious injuries, and malfunctions that could cause death or serious injury.
  3. Annual reports: PMA holders must submit annual reports under 21 CFR 814.84, including a summary of adverse events and device modifications.
  4. Supplemental reports: Updates must be submitted within 1 month when a manufacturer receives new information about a previously filed MDR that changes the understanding of the event.

What FDA Auditors Look For

During FDA inspections, investigators specifically evaluate post-market surveillance practices. Key audit focus areas include:

  • Written PMS procedures that define signal sources, review frequency, and escalation criteria
  • Evidence of systematic monitoring of external data sources — including FDA MAUDE, recall databases, enforcement actions, and similar device clearances/approvals
  • Documented review decisions with rationale — not just "reviewed — no action" but a substantive explanation of why an event was or was not considered relevant
  • Traceability from PMS signal → complaint evaluation → MDR determination → CAPA (if needed)
  • Complaint files with investigation records and documented MDR-reportability assessments
  • Trend analysis reports covering complaints, MDRs, and field safety data across product families

Common Compliance Gaps

  1. No systematic monitoring of external regulatory signals — Many manufacturers monitor their own complaints but fail to systematically track FDA enforcement actions, competitor recalls, and similar-device adverse events.
  2. Complaint files without documented MDR-reportability assessment — Every complaint must include a documented determination of whether it meets MDR reporting criteria.
  3. PMS procedures that exist on paper but lack evidence of execution — Auditors look for records showing the procedure was actually followed, not just that it was written.
  4. No trend analysis connecting complaints across product families — Individual complaints may not trigger an MDR, but trends across multiple complaints can indicate a systemic issue.
  5. CAPA disconnected from PMS findings — PMS data should be a primary input to the CAPA system. Many firms treat them as separate processes.
  6. QMSR 2026 gap: no explicit PMS process linked to risk management — The new QMSR requires demonstrable linkage between PMS outputs and the risk management file (ISO 14971).

How TrueMedDevice Helps

TrueMedDevice automates external regulatory signal monitoring across 4 FDA data sources — enforcement actions, 510(k) clearances, PMA approvals, and device recalls — with over 323,000 records. The platform matches signals to your device profile, scores them by relevance, and generates audit-ready evidence packs with citations and traceability.

  • Take the free PMS Gap Assessment — Identify your compliance gaps across 30 PMS requirements in under 10 minutes.
  • Try a free demo — See real FDA signals matched to your device in under 3 minutes. No account required.
  • View pricing — Start with a $99 trial or subscribe for continuous monitoring.

Frequently Asked Questions

What is the FDA's MDR reporting deadline?

Manufacturers must submit MDR reports to the FDA within 30 calendar days of becoming aware of a reportable event. Events requiring immediate remedial action to prevent unreasonable risk must be reported within 5 working days.

Does QMSR 2026 change post-market surveillance requirements?

Yes. The Quality Management System Regulation (QMSR), effective February 2, 2026, aligns FDA requirements with ISO 13485:2016 and introduces explicit post-market surveillance process requirements linked to risk management and CAPA.

What external data sources should manufacturers monitor for PMS?

Manufacturers should monitor FDA MAUDE (adverse event database), FDA enforcement actions, device recalls, 510(k) clearances and PMA approvals for similar devices, and published clinical literature. Systematic monitoring of these sources demonstrates proactive PMS compliance.

Are importers required to report MDRs?

Yes. Under 21 CFR 803.40, importers must report to the FDA and the manufacturer within 30 days of becoming aware of an event that reasonably suggests a device may have caused or contributed to a death or serious injury.

What is a 21 CFR 822 post-market surveillance study?

A PMS study under 21 CFR 822 is an FDA-ordered prospective study for certain Class II and Class III devices. These studies monitor long-term device performance and safety, typically spanning 36 months with cohorts of up to 10,000 or more patients.

References

  1. 21 CFR Part 803 — Medical Device Reporting
  2. 21 CFR Part 806 — Reports of Corrections and Removals
  3. 21 CFR Part 822 — Postmarket Surveillance
  4. 21 CFR Part 820 — Quality System Regulation
  5. FDA QMSR Final Rule
  6. FDA MAUDE — Manufacturer and User Facility Device Experience Database

See how these signals relate to your device

Generate a free mini evidence pack in under 3 minutes. No account required.

Generate My Evidence Pack

Related Articles

FDA Post-Market Surveillance Requirements (2026) | TrueMedDevice