QMSR effective Feb 2026: the combination-product bridge that wasn't documented.
FDA's Quality Management System Regulation — 21 CFR 820 harmonised with ISO 13485:2016 — became effective 2 February 2026. For pure devices, the migration is administrative. For combination products, the regulation forces a documented handshake between Design History File and bioanalytical method validation that few sponsors pre-staged.
The QMSR final rule was published 2 February 2024 with a two-year transition; effective date 2 February 2026. The substantive change is the alignment of 21 CFR 820 with ISO 13485:2016, with FDA-specific additions on labelling, complaint handling, and certain documentation. For a device manufacturer already certified to ISO 13485, QMSR brings the US regulation into harmony with what they have been doing. For a combination-product sponsor — drug-device, biologic-device, drug-biologic — QMSR has a second-order consequence that has not received commensurate attention: the bridging documentation between the device-side Design History File (DHF, retained as Medical Device File under ISO 13485 §4.2.3) and the drug-side bioanalytical method validation file.
/ 01Why the bridge exists.
Combination products under 21 CFR 3.2(e) — drug-device or biologic-device combinations — are reviewed under a Primary Mode of Action determination assigned by the Office of Combination Products. For products with drug PMOA, CDER leads; for device PMOA, CDRH leads; for biologic PMOA, CBER leads. The lead centre's regulations apply primarily, with the secondary centre's regulations applying to the secondary constituent. A drug-PMOA combination product has CDER-led submission with CDRH design controls applying to the device constituent, and the device constituent is regulated under 21 CFR 820 (now QMSR).
The bioanalytical method validation file lives under the drug constituent's regulatory regime — historically GLP for nonclinical, ICH M10 for the BMV core. The Design History File / Medical Device File lives under the device constituent's regulatory regime — historically 21 CFR 820, now QMSR. The two files have not historically had to talk to each other. Inspections rarely walked from one file to the other. QMSR's harmonisation with ISO 13485 closes the gap: the device-side risk management under ISO 14971 must be traceable to the bioanalytical method validation that supports the combined product's intended use.
/ 02What the handshake looks like.
Design input.
21 CFR 820.30(c) / ISO 13485 §7.3.3 design input must capture intended use, performance requirements, regulatory requirements. For a combination product, the intended use includes the bioanalytical readout that supports the drug's pharmacokinetic claim. The bioanalytical method's validated range, accuracy, precision, selectivity profile become design inputs to the device constituent — particularly when the device constituent affects sample collection, handling, or initial processing.
Risk assessment.
21 CFR 820.30(g) / ISO 14971 design validation requires risk analysis tied to intended use. For a combination product, this risk analysis must account for the failure modes of the bioanalytical assay that supports the combined product's safety and efficacy. ISO 14971 has historically been read narrowly — device hazards only. QMSR's harmonisation with ISO 13485 invites a broader read that incorporates the assay-side hazards material to combined-product use.
Change control.
21 CFR 820.30(i) design changes must be reviewed and approved before implementation. For a combination product, a change to the bioanalytical method (instrument generation, reagent supplier, software version) may have design-control implications on the device constituent — particularly if the device's intended-use claim depends on the method's specific performance characteristics. Sponsors with separate change-control workflows for drug-side BMV and device-side DHF are missing the cross-link.
The bridge has always logically existed. QMSR is the first regulation that compels its documentation. Sponsors with pre-2024 combination-product files are the ones who will produce it under inspection time pressure.
/ 03The retrofit problem.
For combination products in development today, the bridge can be designed in upfront — design inputs capture the bioanalytical method requirements, risk assessment incorporates assay-side hazards, change control links the two files. For combination products approved before 2 February 2026 with ongoing manufacture and post-market surveillance, the bridge must be retrofitted. The retrofit work involves walking back through the DHF and the BMV file, identifying the cross-references that were never explicit, drafting a bridging document that establishes the linkage, signing it under change control, training the relevant personnel.
The retrofit is not impossible. It is a moderately substantial documentation project that competes for QA bandwidth with everything else QMSR is asking. Sponsors who started the retrofit in 2024 are largely complete. Sponsors who started in 2025 are mid-stream. Sponsors who have not started are now operating against an effective regulation with a documentation gap that an inspector will identify in routine cause for inspection.
/ 04The top-5 483 projection.
The 2025 bioanalytical 483 cluster — see the 2025 pattern note — has been ISR (28%), reagent-lot bridging (22%), partial-validation pre-definition (17%), method-transfer (14%). Combination-product DHF-to-BMV bridging is projected to enter the top-5 by 2027 as inspectors who have absorbed QMSR's combination-product implications begin to walk this specific cross-reference during inspections of pharma sites with combination-product portfolios. The signal is already visible in 2026 H1 inspection cadence at sponsors with autoinjector, prefilled syringe, and drug-eluting stent portfolios.
/ 05What to do by 2027.
For combination-product sponsors:
- Inventory every approved combination product and identify the bioanalytical methods supporting each
- For each product, draft a bridging document that maps DHF design inputs to BMV file requirements
- Update the change-control SOP so that BMV-side changes flag for DHF-side review and vice versa
- Retrain QA personnel on the cross-reference; the muscle memory does not exist yet
- Archive the bridging document in both the DHF and the BMV file with mutual cross-references
- Review the risk-management file under ISO 14971 to incorporate assay-side hazards where material
The work integrates with the broader QMSR transition activities under the existing QMS — see the governance library. QMSR is not separable from the rest of the quality system; the combination-product bridging is one substantive workstream within the broader transition. Sponsors that read QMSR as administrative will be exposed to the bridge finding when it lands.