21 CFR 820.170 — Patient Safety Is Not Negotiable.
Under 21 CFR 820.170, federal law is clear: medical devices must be safe, effective, and properly installed, tested, and maintained. When corporate policy conflicts with that obligation — the law wins.
"When conduct causes a device to become unsafe, misbranded, or adulterated — federal law treats that conduct as a prohibited act, regardless of intent or internal directives."
Patient safety is the supreme obligation in medical-device law. Not contracts. Not corporate policy. Not litigation posture. Not trade-secret labels.
This resource was built from firsthand experience installing and servicing FDA-regulated medical imaging systems, combined with public records, published statutes, and enforcement history.
Imaging systems aren't consumer electronics. Magnets, motion systems, high-voltage power, RF, radiation, and software controls all intersect. Missing installation or inspection criteria isn't paperwork — it's how real hazards slip in quietly.
Under the Federal Food, Drug, and Cosmetic Act, Congress made one obligation clear: devices must be safe, effective, and properly installed, tested, and maintained. See 21 U.S.C. § 331, § 351, § 352, § 360k, § 360kk, and 21 C.F.R. § 820.170.
When conflicts arise between safety obligations and corporate positioning, patient safety must win. Every time. Courts may debate liability. Companies may debate exposure. Physics does not. Patients should never be the ones absorbing that risk.
21 CFR 820.170 & § 360k — Prohibited Acts & Core Statutes
This site starts where accountability lives: federal law. Corporate policies, internal legal instructions, trade-secret claims, or contractual restrictions do not override federal safety obligations. Enforcement doesn't ask who wrote the policy — it asks who carried it out when compliance was no longer optional.
Prohibited Acts
The foundational prohibited acts provision of the FDCA. When conduct results in an adulterated, misbranded, or non-compliant device, it falls here — regardless of who wrote the policy.
Read on USCode.house.gov →Adulteration
Defines when a device is considered adulterated. If a device's safety is compromised due to improper installation or withheld service information, adulteration exposure arises.
Read on USCode.house.gov →Misbranding
A device that lacks required labeling, instructions, or safety information is misbranded. This applies to missing installation and service documentation in many contexts.
Read on USCode.house.gov →Medical Device Standards
Key reference for device performance standards and preemption analysis. Cited in accountability assessments where safety standards are in question.
Read on USCode.house.gov →Performance Standards
Addresses performance standards for electronic products. A key reference when device performance criteria are at issue and where safety depends on verifiable specifications.
Read on USCode.house.gov →Library of Congress Repair Exemption
Triennial LoC rulemaking has reaffirmed exemptions that can permit circumvention for lawful diagnosis, maintenance, and repair of medical devices in specified contexts.
FTC — Unfair Practices
When restrictions on parts, tools, or repair information affect safety representations and market access, FTC Act Section 5 authorities may be implicated.
FCC — ISM Equipment / EMC
Medical imaging environments involve electromagnetic compatibility and interference considerations. FCC rules for industrial, scientific, and medical equipment govern these settings.
What People Ask When This Gets Real
21 CFR 820.170 — Installation Controls
The plain text of 21 CFR 820.170 uses mandatory language ("shall") and requires manufacturers to establish and maintain adequate installation and inspection instructions, including directions to ensure proper installation so the device performs as intended after installation.
Technical Information Categories
Public explanations describe Form 3663 paragraph F.5 as including specific categories of technical information. If these categories exist in the regulatory context — why are qualified installers, owners, and servicers blocked from accessing them when patient safety depends on it?
Operation & Maintenance Manuals
Procedures required for the safe operation, routine maintenance, and scheduled servicing of a regulated medical device — essential for anyone responsible for keeping the equipment in compliant working order.
Service Manuals
Detailed technical documentation covering component-level repair, fault diagnosis, calibration, and corrective maintenance procedures necessary to restore a device to its intended safe operating state.
Performance or Design Data
Specifications, acceptance criteria, and design parameters that define how a device should perform under normal operating conditions — required to verify that installation and servicing meet manufacturer and regulatory standards.
Wiring Diagrams & Schematics
Electrical, mechanical, and system-level diagrams required to safely inspect, troubleshoot, and service a device. Without these, installers and technicians cannot verify that high-voltage, RF, and motion systems are correctly configured.
Warnings & Labeling
Safety warnings, hazard notices, contraindications, and required labeling that must accompany a device at installation and throughout its service life. A device missing required warnings may be considered misbranded under 21 U.S.C. § 352.
The core safety question: If these categories are formally recognized in regulatory context, and if patient safety depends on qualified installers and servicers having access to them — on what legal or ethical basis are they being withheld?
Trade Secrets vs. Patient Safety
This site is not anti-IP. It is anti-"IP used as a shield to block safety-critical information."
If information is required to ensure safe installation, servicing, or operation of a regulated medical device, withholding it can create compliance and patient safety risks — regardless of how that information is labeled internally.
The Library of Congress (via the Copyright Office's triennial rulemaking) has adopted and reaffirmed exemptions under 17 U.S.C. § 1201 that can permit circumvention for lawful diagnosis, maintenance, and repair in specified contexts. "Locked down" access claims often collide with real-world patient safety responsibilities.
Submit Evidence & Report to FDA
There are two paths for raising medical device safety issues — directly to the FDA for formal regulatory action, or to this site as documented evidence.
📸 Submit Photos or Safety Evidence
If you have photos, videos, or documentation showing:
- Medical device defects or failures
- Installation or service problems
- Missing or withheld safety instructions
- Injuries or near-miss events involving medical devices
Subject line: SAFETY EVIDENCE SUBMISSION · Do NOT include patient names, medical record numbers, or PHI. Submission does not create a legal, medical, or professional relationship.
🧾 Report a Safety Issue to FDA
FDA MedWatch (Form 3500) — the formal channel for adverse event reporting with federal whistleblower protections.
FDA MedWatch →
Device reporting (MDR): 21 CFR Part 803
Corrections & Removals: 21 CFR Part 806
Government Agency Links
🧭 Whistleblower Notice
This site discusses patient-safety risks and potential regulatory non-compliance based on public records and field experience. Nothing herein waives any whistleblower rights or protections under applicable law. Individuals raising safety concerns through appropriate channels are protected under multiple federal statutes.
📜 Terms of Use
By using this site, you agree that content is educational and informational only, provided without warranties of any kind, and that you will independently verify all regulatory requirements before relying on anything presented here. No professional relationship — legal, medical, or regulatory — is created by accessing or using this site.
Suggest an Improvement
Have an idea to make this site more useful? See something missing, inaccurate, or that could be clearer? Submit your suggestion below — it goes directly to Marshall.
Your message goes directly to Regulations@21cfr820.net. No spam, no third-party storage — just a direct email.
Built From Firsthand Experience
This is not a law firm, a government office, or a compliance consultancy. It is a firsthand account — backed by public records and enforcement history.
I built this site from firsthand experience installing and servicing FDA-regulated medical imaging systems. The content combines that field knowledge with public records, published statutes, and regulatory enforcement history. Views expressed are based on public records and personal experience; they do not represent official agency positions or determinations. Nothing on this site constitutes legal advice or creates a professional relationship.