21 CFR 820.35
Control of records
21 CFR 820.35 is the regulation titled “Control of records” in 21 CFR Part 820, Quality Management System Regulation. Since 2021, 1 FDA warning letter has cited it.
- Letters citing it
- 1 since 2021
- Jan 1 to Oct 30, 2026
- 1 against 0 on the same dates in 2025
- Most often cited with
- ISO 13485 7.1, in 1 letter
- Closed out
- 0% of these letters have a published close-out
Letters citing it, by year issued
It is a medical device letter. 2026 runs to Oct 30, 2026. Pick a year to see its letters.
- 02021
- 02022
- 02023
- 02024
- 02025
- 12026
What FDA writes when it cites it
The finding headings that cite 21 CFR 820.35 most often, as written in the letters.
- 1 letterFailure to maintain records of the review, evaluation, and investigation for any complaints involving the possible failure of a device, labeling, or packaging to meet any of its specifications, as required by 21 CFR…
The regulation
Read the text of 21 CFR 820.35 (eCFR, as of Sep 1, 2026)
In addition to the requirements of Clause 4.2.5 in ISO 13485 (incorporated by reference, see § 820.7), Control of Records, the manufacturer must include the following information in certain records:
(a) Records of complaints. In addition to Clause 8.2.2 in ISO 13485, Complaint Handling, the manufacturer shall maintain records of the review, evaluation, and investigation for any complaints involving the possible failure of a device, labeling, or packaging to meet any of its specifications. If an investigation has already been performed for a similar complaint, another investigation is not necessary, and the manufacturer shall maintain records documenting justification for not performing such investigation. For complaints that must be reported to FDA under part 803 of this chapter, complaints that a manufacturer determines must be investigated, and complaints that the manufacturer investigated regardless of those requirements, the manufacturer must record the following information:
(1) The name of the device;
(2) The date the complaint was received;
(3) Any unique device identifier (UDI) or universal product code (UPC), and any other device identification(s);
(4) The name, address, and phone number of the complainant;
(5) The nature and details of the complaint;
(6) Any correction or corrective action taken; and
(7) Any reply to the complainant.
(b) Records of servicing activities. In adhering to Clause 7.5.4 in ISO 13485, Servicing Activities, the manufacturer must record the following information, at a minimum, for servicing activities:
(1) The name of the device serviced;
(2) Any UDI or UPC, and any other device identification(s);
(3) The date of service;
(4) The individual(s) who serviced the device;
(5) The service performed; and
(6) Any test and inspection data.
(c) Unique Device Identification. In addition to the requirements of Clauses 7.5.1, 7.5.8, and 7.5.9 in ISO 13485, the UDI must be recorded for each medical device or batch of medical devices.
(d) Confidentiality. Records deemed confidential by the manufacturer may be marked to aid FDA in determining whether information may be disclosed under the public information regulation in part 20 of this chapter.
Text from eCFR as of Sep 1, 2026.
Cited alongside it
Regulations that appear in the same letters as 21 CFR 820.35.
Latest letters citing it
The letter citing 21 CFR 820.35 that FDA posted most recently.
See the letter citing 21 CFR 820.35 →Put this kind of reading to
work on your own records.
Botable builds and runs a custom AI layer around the software you already use, so your team can do the job you hired them for.
Counts include every citation in a letter, as the Letters filter does. How this database is built.