Operating Licence versus Sanitary Registration: One Governs the Company, One the Product
Updated: 2026-11-11 · GRZAN Regulatory Team · Verification date 2026-10-20
1. Key takeaways
Panama issues device compliance credentials on two separate tracks. The operating licence (Licencia de Operación) governs the company and its premises, certifying that the establishment and its processes meet the quality and safety standards required for the activity. The sanitary registration (Registro Sanitario) governs the product, authorising its import, export, sale and use. Neither substitutes for the other, and the relationship between them is not parallel. Article 69 of Decreto Ejecutivo N° 490 provides that when a licence is suspended or cancelled, the marketing qualification of all devices and related products covered by it is lost at the same time, even where their sanitary registrations remain valid (independientemente que sus Registros Sanitarios estén vigentes).
- Company versus product — the licence answers whether the entity may trade; the sanitary registration answers whether a specific device may be placed on the market.
- Dependency, not parity — the survival of product-level permissions is conditional on the company-level permission, in one direction only.
- Article 69 wording — the phrase independientemente is what converts an ordinary suspension into a portfolio-wide stop-sale event.
- CCT as a third credential — the technical standards certificate sits on the product side, is mandatory for public procurement, runs for five years and is free of charge.
- Two clocks — both instruments last five years but start differently and renew differently, so a single combined reminder will miss one of them.
- Sequencing — the licence copy is a required component of the product-side file, which fixes the order of operations as licence first, product second.
2. Legal basis
Article 12 of DE 490 defines what the licence certifies, Article 13 gives it a five-year term, and Article 21 creates the CCT as a product-side credential. On the statutory side, Article 15 of Ley N° 90 of 26 December 2017 defines the sanitary registration, while definitions 32 and 38 in Article 6 of the same law define the operating licence and the sanitary registration respectively. Article 69, first paragraph, supplies the linking rule between the two tracks.
| Decreto Ejecutivo N° 490 (4 October 2019) | Article 12 | The licence certifies that the premises and their processes meet the quality and safety standards required for the activity; it guarantees only the sale of devices and related products |
| Ley N° 90 (26 December 2017) | Article 15 | The sanitary registration is the document authorising import, export, sale and use of a device, at public and private level |
| Ley N° 90 | Article 6, definition 38 | Definition of sanitary registration |
| Ley N° 90 | Article 6, definition 32 | Definition of operating licence |
| Decreto Ejecutivo N° 490 | Article 69, first paragraph, final sentence | Suspension or cancellation of the licence conlleva también la suspensión o cancelación de la comercialización de todos los Dispositivos Médicos y productos afines amparados en ella, independientemente que sus Registros Sanitarios estén vigentes |
| Decreto Ejecutivo N° 490 | Article 21 | CCT: product-side credential, mandatory for public procurement, five years, free of charge |
| Decreto Ejecutivo N° 490 | Article 13 | Licence valid for five years |
3. Expert insights
Insight one: the word independientemente in Article 69 is the most important phrase in the Panamanian compliance system. The text states that the consequence of a licence lapsing does not depend on the status of the product registrations. That establishes a hierarchy in which the company qualification is a precondition for the product qualification. Many markets design the two as parallel instruments, each valid on its own terms; Panama has designed a relationship of dependency. The effect on holding structures is direct: where a product registration sits with an entity, the licence risk of that entity is transmitted straight to the product, and due diligence that reviews only the registration certificate will miss the exposure entirely.
Insight two: the general requirements for the CCT expressly list the licence as a prior document. Article 36, item 3, of DE 490 requires submission of a Copia simple de la Licencia de Operación de dispositivos médicos. A product-side application therefore cannot be filed by an entity that does not already hold the company-side credential, which fixes the sequence as licence first and product second. Applicants who begin product work while the licence application is still in the forty-five working day queue will find the file incomplete at intake, not merely delayed.
Insight three: both credentials last five years, but their start dates and renewal windows differ. The licence runs five years and must be renewed by application sixty working days before expiry under Article 13. The CCT runs five years from the date of issue under the second paragraph of Article 21, and the text sets no advance renewal window for it. The two timelines therefore run independently, and merging them into one register tends to lose whichever falls due in a different month. Separate registers, each with its own trigger, are the only reliable arrangement.
Insight four: the distinction explains why the proposition that private channels require only the licence holds. A 2024 overview of Panamanian law by the Swiss Chamber records that, while DNDM has not opened the sanitary registration channel, devices in private transactions do not require sanitary registration where the importer or distributor holds an operating licence, whereas sales to government, by public tender or direct contract, require the technical standards certificate (practical estimate, subject to the current position of DNDM). This is consistent with the third paragraph of Article 21, which requires the CCT for public procurement: the public channel adds a product-side credential, while the private channel rests on the company-side licence.
4. Practical recommendations
- Keep the licence and the product credentials on two separate registers, each with its own expiry and renewal triggers.
- When arranging the holding structure, assess the transmission of licence risk, since the compliance record of the entity carrying the product directly affects whether that product can be sold.
- Before filing a product-side application, confirm the licence is in force and that a simple copy is available for Article 36, item 3.
- For multi-product entities, assess the knock-on effect of a licence lapse for each legal person separately.
- Configure credentials by channel: the CCT for public procurement, the licence plus current requirements for private channels.
- Record in the register which credential each product depends on, so that a licence event can be mapped to the affected portfolio quickly.
5. Verification checklist
- □ Licence (company level) and product credentials confirmed as two separate tracks
- □ Knock-on consequence under Article 69 recorded, including its effect on all products
- □ Licence copy available before any product credential application (Article 36, item 3)
- □ Two timelines registered separately, licence five years and CCT five years
- □ Licence renewal run on a sixty working day lead time
- □ Credential configuration confirmed against the sales channel
How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Panamanian market. Our team manages Ministry of Health (MINSA) sanitary registration applications, prepares Spanish-language dossiers, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com
Disclaimer
Prepared by GRZAN from publicly available regulation. It is provided for general information only and does not constitute legal advice. Legislation and official fees are subject to change by the competent authority.
About GRZAN
GRZAN (Global Regulatory Zone Access Navigator) — the global market-access navigator for medical devices and IVDs.
GRZAN is a specialist consultancy for medical device and IVD market access, providing end-to-end regulatory solutions across the product lifecycle and making international market entry simpler and faster.
Key figures. More than 25 wholly owned subsidiaries worldwide covering 50+ countries and regions; chosen by 100+ listed and leading Chinese device manufacturers, with 4,000+ successful cases; 12+ years in the sector and 200+ regulatory training sessions and seminars delivered.
What we do. Global market access: multi-country registration programmes, technical documentation, regulatory advice. Clinical evidence: clinical evaluation reports (CER), usability studies, overseas clinical investigations. Quality systems: ISO 13485, MDSAP, FDA QMSR and BGMP implementation and audit readiness. Authorised representative and licence-holder services across Southeast Asia, Latin America, the Middle East, Africa, Europe and North America.
Why GRZAN. A real operating entity, with the certificate held by the manufacturer: our direct overseas subsidiaries act as the compliant local holder, so the regulatory relationship stays clear and you keep control rather than being tied to a distributor. Direct access to the team: no time-zone gap, no language barrier, no cultural gap. Review points anticipated: we know what FDA 510(k), EU MDR, Southeast Asian, Latin American and Middle Eastern reviewers look for, which shortens timelines and reduces deficiency letters. Pathway planning: pre-decision analysis and risk assessment before you commit.
Every engagement rests on three commitments: efficiency through pre-submission review, certainty through a clear pathway, and stability through a licence-holder that stays in place.
Take your devices global with GRZAN
We work with manufacturers worldwide to open new markets with a clear regulatory pathway.
Contact us