FDA 21 CFR Part 803 is the U.S. Medical Device Reporting (MDR) regulation. It requires manufacturers, importers, and device user facilities to report certain device-related deaths, serious injuries, and malfunctions to the FDA within set timelines, and to keep MDR procedures and event files that document each reportability decision.
What is FDA 21 CFR Part 803?
FDA 21 CFR Part 803 is the section of federal regulation that governs Medical Device Reporting, usually shortened to MDR. It sits in the postmarket phase of the device lifecycle, after a product reaches the U.S. market, and turns adverse-event awareness into a documented, time-bound submission to the FDA.
The rule does not ask for proof that a device caused harm. The reporting threshold is whether the available information reasonably suggests a device may have caused or contributed to a death or serious injury, or, for a malfunction, whether recurrence would likely cause or contribute to such an outcome. You report first, then continue to investigate and supplement as facts develop.
Why FDA 21 CFR Part 803 matters in medical device development
MDR is one of the most visible postmarket obligations a device company carries. FDA investigators review MDR files during inspections, and gaps are a frequent source of Form 483 observations and warning letters. Late reports, inconsistent reportability calls, and missing written procedures all signal a quality system that does not track its own safety signals.
The stakes reach past the audit. Aggregated MDR data feeds the FDA MAUDE database and can trigger recalls, safety communications, or added scrutiny of a product code. For an OEM, weak reporting raises legal exposure and can slow future submissions. Handled well, the same data becomes an early-warning input that informs design changes and risk files under ISO 14971.
How FDA 21 CFR Part 803 works
Part 803 assigns different duties and clocks to each reporter. The core mechanics:
- Manufacturers report deaths, serious injuries, and reportable malfunctions to the FDA within 30 calendar days of becoming aware. A 5-work-day report applies when an event needs remedial action to prevent an unreasonable risk of substantial harm, or when the FDA requests it.
- Importers report deaths and serious injuries to both the FDA and the manufacturer within 30 calendar days, and malfunctions to the manufacturer within the same window.
- Device user facilities report device-related deaths to the FDA and the manufacturer, and serious injuries to the manufacturer (or the FDA if the manufacturer is unknown), within 10 work days. They also file annual summary reports.
Manufacturers and importers submit through the electronic gateway, eMDR, using Form FDA 3500A data, a requirement in force since August 2015. Part 803 also mandates written MDR procedures (Section 803.17) and MDR event files (Section 803.18) that hold the reportability rationale and retained records. Reportability decisions usually begin in complaint handling, which links MDR to the quality system now expressed through the FDA Quality Management System Regulation (21 CFR Part 820), aligned with ISO 13485:2016 as of February 2, 2026.
Common challenges and best practices
The hardest part of MDR is rarely the submission itself. It is the reportability decision. Teams disagree on what counts as a serious injury, or they let the “become aware” date drift, which quietly shortens the reporting clock. Both problems surface later as late filings.
Good programs settle a few things early. They fix the become-aware date at the moment any employee receives qualifying information, not when a review committee meets. They write clear reportability criteria so two reviewers reach the same call on the same facts. They keep the decision rationale in the event file, including the reasoning behind any decision not to report, because inspectors examine those non-reports closely. Strong teams also reconcile MDR against complaints, CAPA, and recall records so a single event is not classified three different ways.
How SJML helps with FDA 21 CFR Part 803
Syrma Johari MedTech (SJML) runs adverse-event reporting as part of its Compliance-as-a-Service offering. The QARA team handles complaint intake, reportability assessment, and adverse-event submission, supported by root-cause analysis and CAPA. This ties into broader post-market surveillance work, including PMS and PMCF planning, periodic safety reporting, and field safety corrective actions. SJML aligns these activities with an ISO 13485 quality system and ISO 14971 risk files, so reportability decisions stay consistent and inspection-ready across a device portfolio.
Frequently asked questions
A 30-day report is the standard manufacturer and importer submission for a device-related death, serious injury, or reportable malfunction, due within 30 calendar days of becoming aware. A 5-work-day report is faster and applies when an event requires remedial action to prevent an unreasonable risk of substantial harm to public health, or when the FDA specifically requests it.
Three groups carry mandatory duties: manufacturers, importers, and device user facilities such as hospitals and nursing homes. Manufacturers and importers report deaths, serious injuries, and, for manufacturers, malfunctions. User facilities report device-related deaths and serious injuries. Each group has its own timeline, recipients, and recordkeeping obligations defined across the subparts of Part 803.
No. Part 803 uses a “reasonably suggests” threshold, not a proven-cause standard. If the information available reasonably suggests a device may have caused or contributed to a death or serious injury, you report within the required window, then investigate and supplement. Waiting for certainty is a common cause of late reports and inspection findings.
Manufacturers, importers, and user facilities retain MDR event files for two years from the date of the event, or a period equal to the expected life of the device, whichever is longer for manufacturers. Files must hold the reportability analysis, copies of every submission, and the FDA electronic acknowledgments, and stay available for inspection.
Related terms
- Adverse Event Reporting
- Complaints Handling
- Post-Market Surveillance
- CAPA
- MAUDE Database
