FSCA and Product Recalls for Medical Devices in Mexico

1. Key takeaways

Field safety corrective actions (FSCA) and recalls are led and implemented by the registration holder. What makes Mexico distinctive is that two regulatory lines intersect: the tecnovigilancia regime of NOM-240-SSA1-2012 governs event reporting and field action, while Chapter 15 of NOM-241-SSA1-2025 sets separate product recall requirements at the quality system level. A single field action therefore triggers obligations on both lines at the same time, and a plan prepared against only one of them will leave gaps that the other line exposes. For foreign manufacturers, the practical consequence is that recall readiness in Mexico is a contractual and organisational question, not only a technical one, because the party that must sign, notify, and implement is local. Manufacturers should therefore verify, before first shipment, that the holder has a named recall coordinator and a reachable escalation route at all hours.

• Recall responsibility sits with the registration holder, with the manufacturer in a supporting technical role.
• Two rule sets apply simultaneously: vigilance reporting under NOM-240-SSA1-2012 and system-level recall under Chapter 15 of NOM-241-SSA1-2025.
• Event reports still follow the 2 / 10 / 30 day three-tier deadlines.
• Relabelling (contraetiquetado) can serve as one corrective route for label-type defects, completed before commercialisation or supply.
• Poor handling of a field action feeds into regulatory assessment and the conditions for cancellation of the registration, so the same file protects both the market and the certificate.

2. Legal basis

The dual-track structure rests on four instruments. The vigilance NOM supplies the holder-led duty to report and act in the field, the quality system NOM adds recall and storage requirements, and the amended health law provision governs the cancellation scenarios that follow from mishandled cases. Each line has its own triggers, its own deadlines, and its own documentation expectations, and a compliant programme tracks all of them in one plan. The table below sets out each source with its reference and content.

3. Expert insights

Insight one: the recall is the holder’s responsibility, not the manufacturer’s. Consistent with the tecnovigilancia unit allocation, legal responsibility for field action rests with the registration holder. The manufacturer supplies technical support and root cause analysis, but the external-facing action is implemented by the holder, so the division of labour must be agreed before an event rather than improvised during one. Distributors and hospitals in turn owe the holder prompt notice, which is why upstream notification commitments belong in the same agreement set.

Insight two: two rule sets apply at the same time. NOM-240-SSA1-2012 requires reporting and correction from the vigilance perspective, while Chapter 15 of NOM-241-SSA1-2025 regulates recall from the quality system perspective. A contingency plan must satisfy both sets of requirements simultaneously, and preparing against only one of them is the most common structural defect found in Mexican recall procedures.

Insight three: reporting deadlines still follow the three tiers. Events that trigger an FSCA have usually already entered the deadline framework of Articles 12.3: a serious threat to public health at 2 working days, death or serious deterioration at 10 calendar days, and other reportable events at 30 calendar days. The field action decision and the report deadline therefore run in parallel, not in sequence, and the triage table should show both clocks on the same page.

Insight four: relabelling can be one of the corrective measures. Chapter 18 of NOM-241-SSA1-2025 contains detailed provisions on relabelling (contraetiquetado), and label-type defects can be remedied by correcting the label within Mexico. The work must be completed before commercialisation or supply, which makes the sequencing of the relabelling route a planning question rather than an afterthought. Units already in the distribution chain need to be located and reconciled before the corrected labels can be considered effective.

Insight five: mishandled field actions affect the survival of the registration. Article 376 of the LGS, as amended by the DOF 2026-01-15 instrument, sets out the cancellation scenarios, which are directly relevant to change and renewal management; the quality with which a field action is handled also forms part of the regulatory assessment of the holder. A well-documented recall is therefore a registration-protection exercise as much as a market-protection one, and the same file serves both purposes.

4. Practical recommendations

• Write the recall contingency plan on two tracks, the vigilance line and the system line, with the actions and time limits on each track set out explicitly and cross-referenced so the two tracks never contradict each other.
• Make the holder the primary responsible party and the manufacturer the technical support party, and write the division of duties and time limits into the agreement between them.
• Preset the event tiering criteria and the FSCA decision thresholds so that on-the-spot judgement does not delay the deadline clock, and rehearse the decision with realistic scenarios at least annually.
• For label-type defects, evaluate the relabelling (contraetiquetado) route first and schedule the work for completion before market release.
• Keep records across the entire recall process, from the first field signal to closure and effectiveness verification, so that a complete, submittable file for COFEPRIS exists without reconstruction.

5. Verification checklist

• □ The recall plan covers both NOM-240-SSA1-2012 and Chapter 15 of NOM-241-SSA1-2025
• □ The division of duties between holder and manufacturer is written into the agreement
• □ Event tiering and FSCA decision thresholds have been preset
• □ Reporting deadlines are executed on the 2 / 10 / 30 three tiers
• □ The relabelling route has been evaluated
• □ Recall records can be submitted to COFEPRIS as a complete file

Regulatory information verified as of 28 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Mexican market. Our team manages COFEPRIS registrations and equivalence (equivalencia) reviews, coordinates third-party authorised centre routes, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com