ISO 13485 2024 Amendment

ISO 13485:2016 was finalised before the EU MDR and IVDR were adopted (2017). For seven years, manufacturers maintained a primary QMS to ISO 13485 plus a parallel layer of MDR/IVDR-specific procedures (Post-Market Surveillance Plan and Report, Person Responsible for Regulatory Compliance, Periodic Safety Update Report, importer/distributor obligations). Notified bodies audited both, and the duplication generated friction.

ISO/TC 210 chose the amendment route rather than a full revision because the 2016 structure works. Amendment 1 inserts MDR/IVDR-aligned text into the existing clauses; it does not renumber, restructure or re-baseline the standard.

• Post-Market Surveillance — PMS Plan, PMS Report, PSUR for Class IIa/IIb/III aligned to MDR Articles 83-86 and IVDR Articles 78-81.
• Person Responsible for Regulatory Compliance (PRRC) — MDR Article 15 / IVDR Article 15, including qualifications, responsibilities and reporting.
• Economic Operators — manufacturer, authorised representative, importer, distributor obligations per MDR Articles 11-14 / IVDR Articles 11-14.
• UDI — alignment with MDR Annex VI / IVDR Annex VI UDI assignment, carrier and database requirements.
• Vigilance and Field Safety Corrective Actions (FSCA) — MDR Articles 87-92 / IVDR Articles 82-87 reporting flows.
• Clinical/Performance Evaluation — alignment of evaluation language; the substantive requirements remain in MDR Annex XIV / IVDR Annex XIII.
• Software lifecycle — alignment with IEC 62304 and the SOUP/SOTIF expectations now expected by notified bodies.

PMS was the largest divergence. ISO 13485:2016 §8.2.1 required the manufacturer to gather post-market information; MDR Articles 83-86 require a formal PMS Plan, a PMS Report (Class I), a Periodic Safety Update Report (Class IIa/IIb/III, 2-yearly or annual for IIb implantables and Class III), and a documented trending mechanism. Amendment 1 aligns the ISO clause to those requirements so a single PMS framework satisfies both audits.

MDR/IVDR Article 15 requires every manufacturer (and authorised representative) to have at least one PRRC permanently available, with defined qualifications, responsibilities (review of conformity, technical documentation, PMS, vigilance, etc.) and authority. Amendment 1 reflects the PRRC role in the QMS responsibilities clause so the role is part of the QMS architecture rather than a parallel regulatory bolt-on.

MDR/IVDR put obligations on importers and distributors that the 2016 ISO standard did not contemplate (registration, verification of CE marking, complaint handling, traceability for 10 years implants / 5 years others). Amendment 1 brings these economic-operator obligations into the QMS scope where the manufacturer engages them, so the manufacturer's QMS controls the chain end-to-end.

UDI assignment, the Basic UDI-DI concept, and the UDI database submission (EUDAMED) are reflected in the amendment. Vigilance flows — serious incident reporting timelines (2/10/15 days per severity), trend reporting, and FSCA — are aligned to MDR Article 87 / IVDR Article 82. The clauses do not duplicate the regulation text; they require the QMS to support it.

FDA's Quality Management System Regulation (21 CFR Part 820 rewrite) incorporates ISO 13485:2016 by reference plus FDA-specific requirements (recordkeeping, design history file, complaints handling vs MDR reporting). FDA QMSR references the 2016 edition; the 2024 amendment is not yet incorporated. Manufacturers with global portfolios will operate against ISO 13485:2016 + Amd 1 for EU and ISO 13485:2016 (base) + FDA-specific overlays for US until FDA updates the QMSR reference.

ISO management-system amendments do not trigger automatic re-certification. Certification bodies will incorporate Amendment 1 into surveillance and recertification audits over 2024-2026. Manufacturers should update procedures and the QMS manual to reflect the amendment text at the next scheduled review, and certainly before the next recertification audit.

For manufacturers already operating under MDR/IVDR with parallel documentation, the amendment is mostly a consolidation exercise — bring the parallel MDR/IVDR documents into the QMS clauses where they now belong, and retire the parallel layer.

• Treating the amendment as a 're-write' and producing wholesale new procedures rather than patching existing ones.
• Missing the PRRC clause integration and leaving the role as a regulatory bolt-on.
• Retaining parallel MDR PMS and ISO PMS procedures after the amendment instead of consolidating.
• Updating procedures but not training records — auditors will check whether the changes are understood.
• Forgetting to update the QMS manual scope statement to reference the amended edition.