Medical DevicesLast reviewed April 2026

ISO 14971(ISO 14971)

The international standard for application of risk management to medical devices across the full product lifecycle.

Usage Examples

The Risk Management File per ISO 14971:2019 was included in the 510(k) submission.
Post-production risk monitoring per ISO 14971 clause 10 integrated with the MDR complaint-handling system.

What is ISO 14971?

ISO 14971 (2019) is the foundational risk management standard for medical devices. It requires a documented risk management process covering risk analysis, evaluation, control, residual risk acceptability, and production/post-production monitoring. The output — a Risk Management File — is a core design history file document referenced in premarket submissions and inspected during facility audits.

FDA recognizes ISO 14971 as a consensus standard under the 510(k) program. EU MDR explicitly references ISO 14971 for conformity assessment. The 2019 revision aligned with EU MDR terminology ("state of the art" instead of "as low as reasonably practicable") and strengthened post-production risk monitoring requirements. ISO/TR 24971 provides implementation guidance.

Regulatory Context

This term appears most often in medical devices workflows where submission quality, regulatory evidence, and audit readiness depend on consistent language. It is commonly referenced alongside ISO 14971, 21 CFR 820, EU MDR.

FDA CDRHEMAHealth Canada

When This Matters

The Risk Management File per ISO 14971:2019 was included in the 510(k) submission.
Post-production risk monitoring per ISO 14971 clause 10 integrated with the MDR complaint-handling system.

Common Mistakes

Using drug-only submission assumptions for device regulatory pathways.
Ignoring post-market obligations in pre-market planning.
Weak predicate and classification rationale in dossier narratives.

Related Regulations

ISO 1497121 CFR 820EU MDR

Frequently Asked Questions

Not directly by US law, but FDA recognizes it under the 510(k) program and inspectors reference it. Under EU MDR, ISO 14971 is referenced in harmonized standards and is the de facto expectation for conformity assessment. Most manufacturers comply globally through a single ISO 14971 process.

ISO 14971 is a framework; FMEA (Failure Mode and Effects Analysis) is a specific technique often used within it. Other techniques (Fault Tree Analysis, HAZOP) are also valid. The standard is method-agnostic; the manufacturer selects appropriate techniques.

Alignment with EU MDR terminology, strengthened post-production monitoring requirements, clearer separation between benefit-risk assessment and risk acceptability, and removal of "As Low As Reasonably Practicable" language in favor of "state of the art". ISO 24971 provides extensive implementation guidance.