Post-Market Surveillance Requirements for FDA-Cleared Devices: What You're Legally Obligated to Do After 510(k) Clearance

Clearance Is Not the Finish Line

One of the most expensive misconceptions in medical device commercialization is treating 510(k) clearance as the end of the regulatory journey. It is not. The moment your device enters the U.S. market, a new set of legally binding obligations activates—obligations that, if ignored or mismanaged, can result in warning letters, consent decrees, device recalls, and significant civil monetary penalties.

Post-market surveillance (PMS) is not a bureaucratic afterthought. It is a structured, ongoing system that the FDA expects manufacturers to operate with the same rigor applied to premarket submissions. This post breaks down exactly what those requirements are, where they live in the Code of Federal Regulations, and what your quality and regulatory teams need to have in place before your first unit ships.

The Regulatory Framework: Where PMS Lives

Post-market obligations for FDA-cleared devices are distributed across several parts of Title 21 of the Code of Federal Regulations. Understanding which regulations apply to your device class and intended use is the first step to building a compliant PMS program.

• 21 CFR Part 803 – Medical Device Reporting (MDR): Requires manufacturers to report deaths, serious injuries, and certain malfunctions to the FDA. Reports must be submitted within 30 calendar days of becoming aware of a reportable event, or within 5 days if the event requires remedial action to prevent an unreasonable risk of substantial harm.
• 21 CFR Part 806 – Reports of Corrections and Removals: Mandates reporting of corrections or removals initiated to reduce a risk to health posed by the device, or to remedy a violation of the FD&C Act. Not every field correction requires a report, but the threshold analysis must be documented regardless.
• 21 CFR Part 820 – Quality System Regulation (QSR) / Quality Management System: Subpart M (Records) and Subpart N (Servicing) contain specific PMS-related requirements, including complaint handling, CAPA, and trend analysis obligations. The FDA has aligned Part 820 with ISO 13485:2016 through the 2024 Quality System Regulation update, now formally titled 21 CFR Part 820 Quality Management System Regulation (QMSR).
• 21 CFR Part 822 – Postmarket Surveillance Studies: Grants the FDA authority to order 522 postmarket surveillance studies for Class II and Class III devices under specific conditions, including devices whose failure could cause serious adverse health consequences or devices intended for long-term implantation.

Medical Device Reporting: The Compliance Details That Trip Companies Up

MDR compliance under 21 CFR Part 803 is where many small and mid-sized manufacturers accumulate risk. The regulation requires a written MDR procedure, a complaint file system that can identify reportable events, and a mechanism to submit reports electronically via the FDA's eMDR system using MedWatch Form 3500A.

The most common deficiencies observed during FDA inspections involve three areas: failure to submit reports within the required timeframes, inadequate documentation that a reportability decision was made and why, and incomplete investigation records that fail to establish whether a device malfunction could cause or contribute to a serious injury if it were to recur. Each of these is a discrete 483 observation risk.

Manufacturers should also be aware of the MDR exemptions and alternative reporting mechanisms available under 21 CFR 803.19 and the FDA's guidance on Postmarket Surveillance Under Section 522 of the Federal Food, Drug, and Cosmetic Act. These mechanisms allow for quarterly summary reporting in some circumstances, but require prior FDA approval and a formal alternative summary reporting (ASR) program.

Complaint Handling and CAPA: The Connective Tissue of PMS

Under 21 CFR Part 820.198 (and the equivalent provisions in the updated QMSR), every complaint must be reviewed, evaluated, and investigated where necessary. A complaint is any written, electronic, or oral communication that alleges deficiencies related to the identity, quality, durability, reliability, safety, effectiveness, or performance of a device after it is released for distribution.

What regulators look for is not just that complaints are logged—they look for evidence that your complaint handling system feeds into your CAPA process under 21 CFR 820.100, that trending is performed at defined intervals, and that systemic issues are escalated appropriately. A robust PMS program connects complaint data, MDR reporting, field service records, and CAPA outputs into a closed-loop system with documented management review.

522 Postmarket Surveillance Orders: Know When You're at Risk

The FDA can order a 522 study for your cleared device if it determines the device is intended to be implanted for more than one year, is life-sustaining or life-supporting outside a device user facility, or presents a potential serious risk. If you receive a 522 order, you have 30 days to submit a surveillance plan. Non-compliance with a 522 order can result in the device being deemed adulterated.

Proactively understanding whether your device falls into a 522-susceptible category—before the FDA raises it—is a strategic advantage that good regulatory counsel provides.

Building a PMS System That Actually Works

A compliant post-market surveillance program is not a folder of SOP documents. It is an operational system with defined roles, data inputs, reporting cadences, and escalation paths. At minimum, your PMS program should include:

• A written MDR procedure with decision trees for reportability determinations
• A complaint handling SOP with intake, investigation, and closure requirements
• A trending and signal detection process reviewed at least annually
• A CAPA procedure that is triggered by complaint trends and MDR events
• Management review that incorporates PMS data as a standing agenda item
• A corrections and removals procedure aligned with 21 CFR Part 806

For companies subject to EU MDR in parallel, your PMS plan and PSUR obligations under Article 84-86 of Regulation (EU) 2017/745 should be harmonized with your U.S. PMS infrastructure wherever possible to reduce redundancy.

Don't Wait for an FDA Inspection to Find the Gaps

The FDA's post-market enforcement posture has intensified. Warning letters citing inadequate MDR procedures and complaint handling deficiencies are increasingly common across device categories. The time to identify gaps in your PMS program is before an inspection—not during one.

At ADB Consulting & CRO Inc., we help medical device companies—from Series A startups to established mid-market manufacturers—build post-market surveillance systems that are FDA-audit-ready from day one. Whether you need a gap assessment against 21 CFR Part 803 and 820, help responding to a 522 order, or a full PMS program build, we bring the hands-on regulatory expertise to get it done right.

Book your free discovery call today at adbccro.com and let's talk about where your post-market program stands—and what it will take to make it bulletproof.