Medical Device Vigilance and ADR Reporting in Sri Lanka

1. Key takeaways

The entry point for medical device vigilance in Sri Lanka is the National Pharmacovigilance Centre, coordinated by the Pharmacovigilance Division of NMRA. Adverse drug reaction (ADR) reports are submitted through a standard case report form, which is available both online and within institutions; NMRA encourages physicians, dentists, pharmacists and nurses to use the standard form to report ADRs associated with drugs as well as medical devices. Sri Lanka became the 59th member of the WHO Programme for International Drug Monitoring (PIDM) in 2001. Taken together, these facts describe a national system that predates the modern device framework, operates through an established professional network, and accepts device-related events through the same channel that has handled drug safety reporting for decades.

The long membership record matters for expectation-setting. A country that has participated in the WHO PIDM since 2001 has an matured reporting culture, established forms, and reviewers accustomed to handling case reports; a device entering this market inherits that machinery immediately. For a manufacturer, the practical reading is that no separate device-vigilance infrastructure needs to be invented from scratch — but equally, no grace period exists in which device events can be quietly absorbed. The network described below is already live and already watching both drugs and devices.

2. Legal basis

The elements of the reporting system are summarised below, with the published sources on the NMRA website and in bulletins of the Sri Lankan epidemiology unit. Reading the table row by row gives a complete picture of who reports, through which tool, and within what network structure — the three questions a MAH must answer before it can design its own vigilance procedure.

3. Expert insights

Insight one: devices and drugs share a single vigilance entry point. In the published wording, ADRs associated with drugs and with medical devices are named side by side, which shows that device vigilance is not a standalone system but is folded into the national pharmacovigilance network. This has practical consequences for how reports are framed: a device event will be processed by reviewers whose primary routines were built around medicines, so the narrative submitted on the standard form must make the device, its batch identification and the event timeline explicit. Companies should not expect a separate device-specific intake channel or device-specific data conventions beyond what the standard form captures.

Insight two: the reporter scope is broad. Beyond the clinical professions, consumers and MAHs may also report. This means that feedback from end users can become a regulatory signal directly, and a MAH that relies solely on its distributors to pass complaints upward will lag behind what the regulator already knows. A patient who files a form online generates an awareness trail that exists independently of the company’s own complaint log. The correct response is to build a collection channel of the MAH’s own — covering hospitals, distributors and end users — so that the company’s picture of field safety is at least as current as the regulator’s, and ideally ahead of it.

Insight three: the network reaches 9 provinces and 25 districts. This density indicates that Sri Lanka’s vigilance reach is substantial, and the probability that an adverse event will be detected is not low. A MAH cannot assume that silence in its own complaint inbox equals safety in the field. With coordinators embedded across provincial and district health services and healthcare institutions participating in the network, events occurring in public facilities are likely to surface through official channels quickly. The operating assumption for any MAH should therefore be that the regulator will hear about serious events early, and that the company’s own assessment, its readiness to respond, and its documented internal escalation process will be judged against that timeline.

4. Practical recommendations

The vigilance framework GRZAN builds for clients contains four elements: designation of a local vigilance responsible person in Sri Lanka, establishment of channel-side collection mechanisms (hospitals, distributors and end users), preparation of report forms that match the official format, and definition of an internal assessment and escalation process. Each element addresses a failure mode observed in practice: an unnamed contact person means reports stall; missing collection channels mean the company learns of events from the regulator; a mismatched form means the submission bounces; and an undefined escalation path means serious events are treated with the same weight as minor ones. We further recommend that the MAH’s obligation of timely notification be written into agreements as a specific number of days, rather than as the word timely, which cannot be assessed or enforced in practice. A fixed day count turns vigilance from an aspiration into an auditable commitment.

5. Verification checklist

• □ The vigilance entry point has been confirmed as the NMRA National Pharmacovigilance Centre
• □ A local vigilance responsible person has been designated
• □ A channel-side adverse event collection mechanism has been established
• □ The official standard case report form is on hand
• □ An internal assessment and escalation process has been defined
• □ Notification time limits (a specific number of days) have been agreed in contracts

Regulatory information verified as of 28 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support across South Asia, including Sri Lanka. Our team prepares dossiers to NMRA expectations, manages submissions and deficiency responses, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com