FDA’s new quality rule raises the bar for contact lens buyers

The FDA’s February 2, 2026 shift to the Quality Management System Regulation changed how medical device factories are inspected and put ISO 13485:2016 at the center of U.S. device quality oversight. For soft contact lens brands and importers, that means registration alone is no longer a meaningful screen for supplier quality.

Why it matters: - The FDA’s new Quality Management System Regulation changes how device makers are checked for quality, and soft contact lenses are included. - Brand owners and importers now need stronger evidence of factory quality controls, not just proof that a supplier is FDA registered. - Buyers that sell into multiple markets may see less duplication if a factory already runs to ISO 13485 standards.

What happened: - The FDA’s new framework took effect on February 2, 2026. - The Quality Management System Regulation, or QMSR, replaced the prior quality system rules that had governed medical device manufacturing since 1997. - The QMSR amends current good manufacturing practice requirements in 21 CFR Part 820. - The rule incorporates ISO 13485:2016 by reference as the key quality management standard for U.S. medical device manufacturing. - The FDA published the rule text on its QMSR page at the FDA’s QMSR page. - On the same date, the FDA stopped using the Quality System Inspection Technique, or QSIT. - The agency shifted to Compliance Program 7382.850 for device manufacturer inspections. - Two earlier inspection documents, 7382.845 and 7383.001, were retired. - The QMSR also incorporates clause 3 of ISO 9000:2015. - The rule now explicitly requires risk management as part of the quality system. - Soft contact lenses are not exempt from the new requirements. - Under 21 CFR 886.5925, a soft hydrophilic contact lens is a Class II device if intended for daily wear only. - The same product is a Class III device if intended for extended wear. - In FDA’s product classification database, daily wear soft contact lenses carry product code LPL, a 510(k) submission type and no GMP exemption. - The QMSR applies to every contact lens factory supplying the U.S. market.

The details: - For brand owners and importers, asking whether a factory is FDA registered no longer distinguishes stronger suppliers from weaker ones. - FDA registration is a filing, not an audit result. - A more useful question is whether the factory’s quality management system has been audited against ISO 13485. - Constar maintains a guide to the FDA 510(k) process for contact lens brand owners that explains how clearance and quality system obligations divide between a factory and the brand that sells the product. - Constar said it obtained ISO 13485 quality management certification in 2017, years before the U.S. rule changed. - The company said it has six production facilities across Gansu and Hunan provinces in China. - Constar said it produces about 15 million lenses per month. - The company said it also holds CE certification for the European Union and FDA clearance. - Constar offers OEM, ODM and private label manufacturing for contact lens brands and distributors. - A Constar quality management representative said the transition was not difficult because the company was already audited against ISO 13485 every year. - The representative said the bigger change is for buyers, because requirements once verified at the end of production now have to be controlled through design and development. - Constar advises buyers to request the scope and expiry date of the current ISO 13485 certificate, plus the registrar that issued it. - Constar also advises buyers to request the outcome of the most recent FDA inspection, including any Form 483 observations and corrective actions taken. - The company says buyers should ask for evidence that risk management is built into design and development, not documented afterward. - Constar also recommends confirming the device is manufactured under the correct classification, because daily wear and extended wear lenses fall into different FDA classes with different submission requirements. - Constar has published a broader compliance checklist for vetting contact lens manufacturers at the company’s compliance checklist.

Between the lines: - The FDA’s harmonization with ISO 13485 is meant to reduce duplicate quality work for manufacturers that already sell internationally. - The shift also moves more of the compliance burden upstream, into design, development and documented risk controls. - That makes supplier selection more technical for contact lens brands, especially those sourcing from contract manufacturers. - The FDA has said U.S. law controls when an ISO 13485 clause conflicts with the Federal Food, Drug, and Cosmetic Act or its implementing regulations.

What’s next: - Contact lens buyers are likely to ask for audit records, inspection outcomes and risk-management documentation earlier in the sourcing process. - Manufacturers supplying the U.S. market will need to show that their quality systems align with ISO 13485 and FDA requirements at the same time. - Brands that rely on private-label or OEM production may face more scrutiny over how product classification and submission duties are split with the factory.

The bottom line: - For contact lens sourcing, FDA registration is no longer the key test. ISO 13485 audit evidence, inspection history and design-stage risk management now matter more.