FDA’s Quality Management System Regulation did not stay in Silver Spring. The rule is US law. The calendar it now collides with is INVIMA, ANVISA, COFEPRIS, and ANMAT — because your Latin American registration holder still has to produce a quality system, not a slide that says “we are ISO-aligned now.”
On 2 February 2024 FDA published the final rule amending 21 CFR Part 820 (89 FR 7496). The effective date was 2 February 2026. The revised part is titled the Quality Management System Regulation (QMSR). FDA’s own description is not subtle: the QMSR incorporates ISO 13485:2016 by reference and keeps additional FDA requirements so that incorporation does not fight the rest of the FD&C Act. Primary text: Federal Register, 89 FR 7496.
Six months after the effective date, the bottleneck I still see is not “did we buy an ISO certificate.” It is whether the person who will hold your sanitary registration in Brazil, Mexico, Colombia, or Argentina can actually retrieve design controls, supplier control, labeling, and a complaint / tecnovigilancia loop that match the configuration you intend to sell.
What QMSR is — and what it is not
QMSR is current good manufacturing practice for devices under US jurisdiction, rewritten onto an ISO 13485 architecture. It is not:
- A substitute for ISO 13485 certification. FDA incorporated the standard by reference; it did not outsource inspections to a registrar. A certificate on the wall is evidence of a third-party audit. It is not evidence that FDA, or INVIMA, or ANVISA, has accepted your file.
- A Brazilian, Mexican, Colombian, or Argentine quality-system approval. ANVISA still runs its own GMP (BGMP) clock for higher-risk equipment. COFEPRIS still wants a licensed Mexican establishment. INVIMA still wants a complete sanitary-registration file and a competent local importer (CCAA) where the rules require one. ANMAT still wants a locally enabled manufacturer/importer on HELENA.
- A clinical-trial authorization. QMSR does not move a first-in-human ethics letter, an investigational import permit, or an IDE. Mixing those clocks is how teams lose a quarter.
The Federal Register text is explicit that FDA retained additional requirements so ISO 13485 would not create inconsistencies with other FDA rules — including control of records and labeling/packaging expectations that sit on top of the ISO clauses. If your LATAM holder can produce an ISO 13485 certificate and cannot produce the labeled, language-correct IFU that matches the registered models, you do not have a QMS. You have stationery.
Why a LATAM holder feels QMSR as a calendar event
Sanitary registration is held by a local legal person in most of the region. Colombia is the structural exception: a foreign manufacturer can hold the INVIMA registro with a local legal representative, but the importer still has to be a licensed actor. Everywhere else, the holder is the face of the file.
That holder is who an inspector, an agency query, or a customs officer will ask for:
- The locked configuration — models, accessories, software version, sterile barrier, intended use.
- The design- and production-control evidence that QMSR now describes in ISO 13485 language (risk throughout the system, not a separate “risk binder”).
- Spanish or Portuguese labeling that matches that configuration. English source files that are still in draft are a lock problem, not a translation problem.
- A post-market / tecnovigilancia owner. ISO 13485 complaint handling is not automatically INVIMA tecnovigilancia, ANVISA notificações, COFEPRIS farmacovigilancia/tecnovigilancia, or ANMAT’s local reporting clock.
If those four items live only at the US legal manufacturer and the holder is a mailbox, QMSR did not “harmonize” anything for you. It made the mailbox more obvious.
Four country clocks — registration QMS, not trial QMS
These are market-access clocks. They are not the investigational QMS you used to import a protocol-only lot.
ANVISA (Brazil) — BGMP is still the Brazil clock
ANVISA’s device regime under RDC 751/2022 is notification (Classes I/II) versus registro (Classes III/IV). For Classes III and IV, the manufacturing unit’s Brazilian GMP certificate is often the real wait — not whether FDA now speaks ISO 13485. Start the BGMP petition when you lock the manufacturing site, not when you lock the US QMSR gap assessment. The Brazil Registration Holder (detentor) is usually a different company from the trial importer of record. Align them before you translate the technical file. See ANVISA.
COFEPRIS (Mexico) — the titular is the licensed establishment
Mexico’s registro sanitario is promoted by a Mexican titular. DIGIPRiS is a filing desk, not a quality system. Equivalence / abbreviated routes that lean on FDA, EU, Japan, or Health Canada can compress review when you actually have a reference-authority approval to rely on. They do not replace a holder, Spanish labeling (NOM-137 is the usual label conversation), or an establishment that can be inspected. QMSR may make your US file easier to map. It does not make COFEPRIS a US inspectorate. See COFEPRIS.
INVIMA (Colombia) — class still decides the queue
INVIMA’s sanitary registration under Decreto 4725 de 2005 is the document that authorizes production, import, and commercialization — not the trial permit you already ran. Risk I/IIA files can move on a complete administrative/technical pack. Risk IIB/III still go through prior evaluation. FIH tables help a high-risk file. They do not skip the unique INVIMA form, Spanish labeling, or the licensed importer. A QMSR-aligned design-history file that still lists “TBD distributor” will stall the same way a 2015 QSR file did. See INVIMA and the practitioner checklist at INVIMA medical device registration checklist.
ANMAT (Argentina) — HELENA is the commercial desk
ANMAT’s commercial device filings run through Sistema HELENA. HELENA is not your ethics committee and it is not FDA. After you lock configuration you need a locally enabled manufacturer/importer, a class-correct expediente, and Spanish files. Company habilitation started after the CSR is how Argentina “looks slow.” QMSR vocabulary in the US file does not create an Argentine digital signature. See ANMAT and ANMAT medical device registration checklist.
The three QMSR mistakes that waste LATAM months
- Treating ISO 13485 certification as the LATAM dossier. Chile’s ISP has long recognized ISO 13485 in its own way. That is Chile. It is not a regional passport. Brazil BGMP, Mexican establishment licensing, and Argentine habilitation remain national acts.
- Leaving labeling and UDI as a “US workstream.” QMSR kept FDA’s hand on labeling and packaging. LATAM agencies will still refuse a file whose IFU, label, and registered models do not match. One source IFU, four translations — not four marketing decks.
- Appointing a holder who cannot sit an inspection. If the only person who can retrieve CAPA, supplier files, and complaint records is in California, your “local holder” is a courier. That was a bad idea under the old QSR. It is a worse idea now that the US rule and ISO 13485 use the same nouns.
A week-zero sequence that does not fight itself
- Write a one-page QMS map: US legal manufacturer, contract manufacturers, and each LATAM holder. Three rows: who owns design lock, who owns production/release, who owns complaints/tecnovigilancia.
- Freeze the commercial identity you are willing to put on a Spanish/Portuguese label. If the next three design changes will rewrite the IFU, you are still in design, not in registration.
- Start the national clocks that do not care about QMSR: ANVISA BGMP petition, Mexican establishment/holder appointment, INVIMA importer identity, ANMAT HELENA habilitation.
- Do not wait for an FDA inspection under the new program to “prove” the system to Latin America. Local agencies will not sit that inspection for you.
Holder economics are public and separate from government fees. bioaccess® pricing is two-part pricing: a one-time registration fee per country by device class, then a lower annual holder fee from year 2 (published for Mexico, Colombia, Brazil, Peru and Argentina on the rate card). That buys an in-country holder architecture — titular / detentor / representante, translations, agency liaison, post-approval modifications, tecnovigilancia as holder. It does not buy ANVISA BGMP, INMETRO, or a customs entry. See the hub: bioaccess® market access.
For the post-FIH version of this split — trial IOR versus commercial holder — I already walked the evidence room in After First Patients: How to Sequence FDA/IDE Data and LATAM Registration. This piece is the QMS half of that calendar.
Disclosure: I am CEO of bioaccess®, a first-in-human / early-feasibility medical-device CRO and LATAM launch / in-country-holder group. The sequencing above is how I tell sponsors to think about the QMSR–LATAM collision; it is not a claim that FDA, INVIMA, ANVISA, COFEPRIS, or ANMAT has accepted any specific file, and it is not a pitch for a particular vendor to hold your registration. ~40% faster / ~30% lower per-patient cost figures used elsewhere on bioaccessla.com are self-reported experience since 2010, not a formal study — they are not QMSR outcomes.