yourstate.us
21 CFR 820.35

§ 820.35 Control of records.

United States · 21 CFR — Food and Drugs · Status: effective

Get this as JSONEmbed this
Cite this
Citation
21 CFR 820.35, § 820.35 Control of records, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/88899
Permanent ID
ys:prov:88899@1
SHA-256
2a0a8d5a4a95bbf97318ee19abbe1835738a177fad872fbba3540f8b6270488c

The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.

Full text

In addition to the requirements of Clause 4.2.5 in ISO 13485 (incorporated by reference, see § 820.7), Control of Records, the manufacturer must include the following information in certain records: (a) Records of complaints. In addition to Clause 8.2.2 in ISO 13485, Complaint Handling, the manufacturer shall maintain records of the review, evaluation, and investigation for any complaints involving the possible failure of a device, labeling, or packaging to meet any of its specifications. If an investigation has already been performed for a similar complaint, another investigation is not necessary, and the manufacturer shall maintain records documenting justification for not performing such investigation. For complaints that must be reported to FDA under part 803 of this chapter, complaints that a manufacturer determines must be investigated, and complaints that the manufacturer investigated regardless of those requirements, the manufacturer must record the following information: (1) The name of the device; (2) The date the complaint was received; (3) Any unique device identifier (UDI) or universal product code (UPC), and any other device identification(s); (4) The name, address, and phone number of the complainant; (5) The nature and details of the complaint; (6) Any correction or corrective action taken; and (7) Any reply to the complainant. (b) Records of servicing activities. In adhering to Clause 7.5.4 in ISO 13485, Servicing Activities, the manufacturer must record the following information, at a minimum, for servicing activities: (1) The name of the device serviced; (2) Any UDI or UPC, and any other device identification(s); (3) The date of service; (4) The individual(s) who serviced the device; (5) The service performed; and (6) Any test and inspection data. (c) Unique Device Identification. In addition to the requirements of Clauses 7.5.1, 7.5.8, and 7.5.9 in ISO 13485, the UDI must be recorded for each medical device or batch of medical devices. (d) Confidentiality. Records deemed confidential by the manufacturer may be marked to aid FDA in determining whether information may be disclosed under the public information regulation in part 20 of this chapter.

Legislative history

This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.