FDA 483 Citations for Servicing Under 21 CFR 820.200
"Procedures or instructions for [performing servicing activities] [verifying that servicing meets specified requirements] have not been [adequately] established." FDA investigators cited 21 CFR 820.200(a) with that wording 13 times on system-generated Form FDA 483s in fiscal year 2025.
The number is modest, but servicing citations matter more than their count suggests. Service records are a direct view into how devices fail in the field. Investigators read them looking for complaints that were never logged and events that should have been reported to FDA.
What the citation means
Examples written after "Specifically" usually describe:
Field service or depot repair performed with no written procedures or service manuals
No verification that a serviced device meets specifications before it is returned
Service reports missing the device identifier, date, technician or test data
Service records not reviewed to determine whether the event is a complaint
Service events involving injury or malfunction not evaluated for MDR reporting
No trend analysis of service data
Third-party service providers working without the manufacturer's procedures or oversight
What 21 CFR 820.200 required
Under the Quality System Regulation, where servicing was a specified requirement, each manufacturer had to establish and maintain instructions and procedures for performing and verifying that the servicing meets the specified requirements (820.200(a)).
Service reports had to be analyzed with appropriate statistical methodology under the CAPA requirements (820.200(b)). Any service report that represented an event that must be reported to FDA under Part 803 was automatically considered a complaint and had to be processed under the complaint handling requirements (820.200(c)). Service reports had to document the name of the device serviced, any UDI and control number used, the date of service, the individual servicing the device, the service performed and the test and inspection data (820.200(d)).
What changed under QMSR
Under QMSR, in effect since February 2, 2026, servicing requirements come from ISO 13485:2016 clause 7.5.4, Servicing activities. If servicing of the medical device is a specified requirement, the organization must document servicing procedures, reference materials and reference measurements, as necessary, for performing servicing activities and verifying that product requirements are met.
The organization must analyze records of servicing activities carried out by the organization or its supplier to determine whether the information is to be handled as a complaint, and, as appropriate, provide input to the improvement process. Records of servicing activities must be maintained.
QMSR section 820.35 adds FDA-specific requirements for servicing records on top of ISO 13485, including the device identification, date, person performing the service, service performed and test and inspection data, and the link to complaint and MDR evaluation remains. Part 803 still applies to any reportable event found during service.
How to respond to the 483
FDA generally considers responses received within 15 business days of the close of the inspection before deciding on further action.
Review past service records
Review service records over a defined period, often two years or more. For each one, decide whether it is a complaint and whether it is MDR reportable. Log complaints and submit any reports found, with dates.
Write servicing procedures
Provide service manuals or procedures for each serviceable device, with the reference measurements and tests needed to verify the device meets specifications before return.
Fix service records
Use a service report form that captures every required element and links to the device history and complaint system.
Trend service data
Analyze service data for recurring failures and feed results into CAPA and management review.
Control service suppliers
Treat third-party service providers as suppliers, give them your procedures and require their records.
What a compliant servicing procedure contains
Scope: serviceable devices, field service, depot repair and third-party service
Service manuals, reference materials and reference measurements
Verification and release after servicing
Service report contents
Complaint and MDR evaluation of every service report
Trend analysis and CAPA input
Parts, tools and calibration for service
Training and qualification of service personnel
Control of service suppliers
Common mistakes in servicing responses
Fixing the service procedure without reviewing past service records for complaints and MDRs
Treating routine maintenance as never being a complaint without evaluating each event
Leaving third-party service providers out of the system
Collecting service data but never trending it
Forgetting UDI and test data in service reports
Example: how one response section might read
This illustrates structure only; your response must describe your own facts.
Observation 15: Procedures for performing servicing activities have not been established. Specifically, infusion pumps returned for repair were serviced without written instructions, and service reports were not evaluated as complaints.
Response:
Retrospective review: All 640 service records from the past two years were reviewed. Fifty-two were logged as complaints, and three were reported as malfunction MDRs on stated dates.
Corrective action: A servicing procedure and pump service manual with functional test requirements were issued. Every service report now includes a complaint and MDR decision field reviewed by quality.
Root cause: Service was managed by the technical support group outside the quality system.
Training: Service technicians and complaint reviewers were trained.
Verification: Quality will review all service reports weekly for three months, then sample monthly.
Frequently asked questions
When is servicing a "specified requirement"?
When servicing is part of the device's requirements, such as periodic maintenance in the labeling, a service contract or a repair program offered by the manufacturer.
Is every service report a complaint?
Not automatically, but every report must be analyzed to decide whether it is one. Reports of events that must be reported under Part 803 are complaints.
Do third-party servicers need to follow our procedures?
If they service on your behalf, they are suppliers and must be controlled. ISO 13485 requires you to analyze service records from your suppliers too.
How A.P. Lyon documents help
A.P. Lyon's Complaint Handling Procedure and Medical Device Reporting (MDR) Procedure cover the evaluation of service events, and the Returned Goods Procedure covers devices returned for repair. The Complaint Trending Procedure supports analysis of service data.
Documents are editable Word and Excel files and must be adapted to your devices and service model. Service manuals must come from your own device design.
Next steps
Review past service records for complaints and MDRs
Write service procedures with verification tests
Capture every required element on service reports
Respond within 15 business days with dates for each action
Related guides: Complaint Handling Citations and MDR Procedure Citations.
To build a complete set of procedures at a volume discount, use Build Your QMS. For help with a 483 response, see A.P. Lyon consulting services.
Not sure where your quality system stands? Take the free QMS gap check: about 20 questions, an instant report of your gaps by clause, and the procedures that close each one.
Comments