Post-Market Surveillance Requirements for FDA-Cleared Devices: What You Must Do After 510(k) Clearance

Clearance Is Not the Finish Line

Getting your 510(k) cleared is a major milestone—but it is not permission to shift your regulatory attention elsewhere. FDA clearance marks the beginning of your post-market obligations, not the end of them. Yet this is exactly where many medical device startups and small-to-mid-sized companies fall short. They invest heavily in pre-market strategy, then treat post-market surveillance (PMS) as a back-office checkbox rather than a living, risk-informed system.

That gap creates real exposure: warning letters, consent decrees, and—most critically—patient harm events that could have been identified and mitigated early. This post breaks down the specific regulatory requirements you need to understand and operationalize after your device reaches the U.S. market.

The Regulatory Framework: What Applies to You

Post-market surveillance for FDA-cleared devices is governed by multiple overlapping regulations. The most relevant include:

• 21 CFR Part 803 – Medical Device Reporting (MDR): Requires manufacturers to report device-related deaths, serious injuries, and certain malfunctions to FDA within defined timeframes.
• 21 CFR Part 806 – Reports of Corrections and Removals: Mandates reporting of field corrections and market removals initiated to reduce risk of serious health consequences.
• 21 CFR Part 820 – Quality System Regulation (QSR) / Device Quality Management System: Section 820.100 requires corrective and preventive action (CAPA) processes that feed directly from post-market data. Note that FDA finalized alignment with ISO 13485:2016 under the Quality Management System Regulation (QMSR), effective February 2026.
• Section 522 of the FD&C Act – Postmarket Surveillance Studies: FDA can order a 522 study for Class II or III devices when necessary to protect public health. This is not limited to Class III—if your cleared device has long-term implantable components or pediatric indications, you may be in scope.

Medical Device Reporting: Timelines You Cannot Miss

Under 21 CFR Part 803, manufacturers have specific reporting windows that are non-negotiable:

• 30-calendar-day reports: Required when you become aware that a device may have caused or contributed to a death or serious injury, or when a malfunction would be likely to cause or contribute to a death or serious injury if it were to recur.
• 5-day reports: Required when you become aware of information that reasonably suggests your device necessitates remedial action to prevent an unreasonable risk of substantial harm to the public health, or when FDA has made a written request for such reporting.

The trigger is not confirmed causation—it is reasonable suggestion. This distinction is where many compliance teams make costly errors by waiting for definitive evidence before filing. FDA's MDR guidance document, Medical Device Reporting for Manufacturers (2016), is explicit on this point. When in doubt, report.

Complaint Handling: The Foundation of Your PMS System

Under 21 CFR Part 820.198 (now harmonized under the QMSR), every complaint must be received, reviewed, and evaluated by a formally designated unit. Complaints are any written, electronic, or oral communication alleging deficiencies related to the identity, quality, durability, reliability, safety, effectiveness, or performance of your device after it is released for distribution.

Your complaint files must be maintained at the manufacturing establishment or a designated U.S. facility and must be accessible to FDA investigators during an inspection. Critically, complaint handling is not a siloed activity—it must connect directly to your MDR decision-making process, your CAPA system, and your risk management file under ISO 14971.

Proactive PMS: Going Beyond Reactive Complaint Management

Sophisticated regulatory programs do not wait for complaints to arrive. A robust post-market surveillance plan—aligned with FDA's guidance on Postmarket Surveillance Under Section 522 of the Federal Food, Drug, and Cosmetic Act—actively mines multiple data sources:

• FDA's MAUDE (Manufacturer and User Facility Device Experience) database for competitor and predicate device signals
• Medical literature and clinical registry data relevant to your device's indication
• Distributor and service technician feedback loops
• Customer satisfaction data and field service reports
• Real-world evidence (RWE) sources increasingly emphasized in FDA's 2021 RWE Framework

The output of this surveillance should feed back into your risk management process as required by ISO 14971:2019, specifically Clause 10, which addresses production and post-production information. If your risk management file is static after clearance, it is not compliant.

Common Gaps FDA Investigators Find

Based on recurring 483 observations and warning letter themes, the most common post-market failures include:

• Failure to file MDRs because the team was waiting for clinical confirmation of causation
• Complaint files that lack documented MDR decision rationale (required under 21 CFR 803.18)
• CAPA systems that are opened but never effectiveness-checked or closed
• No documented procedure connecting complaint review to risk file updates
• PMS plans that exist on paper but are not executed or reviewed on a defined schedule

Build Your PMS System Before You Need It

The companies that navigate post-market obligations well are those that design their surveillance infrastructure before commercial launch—not after their first adverse event. Your MDR procedures, complaint handling SOPs, CAPA workflows, and PMS plan should be validated and trained before your first unit ships.

If you are currently operating without a formal PMS plan, or if your complaint handling system has not been stress-tested against a mock FDA inspection, the time to close those gaps is now—not when an investigator is sitting in your conference room.

Work With a Regulatory Partner Who Knows the Standard

At ADB Consulting & CRO Inc., we help medical device startups and growing companies build post-market surveillance systems that are both FDA-compliant and operationally practical. From drafting your MDR decision procedures to conducting internal PMS audits and mock inspections, we provide the expert-level support your team needs to stay ahead of regulatory risk.

Andre Butler and the ADB team have deep experience navigating the exact intersections of 21 CFR Part 803, Part 820, and ISO 14971 that keep quality and regulatory leaders up at night.

Book a free discovery call today at adbccro.com and let's assess where your post-market program stands—and what it will take to make it bulletproof.