Panama’s National Device Vigilance Programme: Ten Levels of Responsibility

1. Key takeaways

Device vigilance in Panama (vigilancia de dispositivos médicos) is not a self-assessment checklist for companies; it is a nationwide information network. Article 45 of DE 490 requires DNDM to operate the National Device Vigilance Programme through its Device Vigilance Department, identifying risks, adverse events and failures, quantifying risk, proposing and executing public health measures, and informing users, professionals, authorities and the public. Article 51 divides responsibility across ten levels, from the Ministry of Health down to health professionals. Article 49 groups reportable situations into four categories and defines serious damage to health through six criteria. For companies, the two direct landing points are items 6 and 7 of Article 52: suppliers and manufacturers must each designate at least one qualified professional responsible for vigilance and acting as counterpart (corresponsal) to the authority.

2. Legal basis

The programme rests on one executive decree for its operational detail and on a statute for its higher-level mandate. The decree sets the purpose, the definition, the principles, the reporting categories, the allocation of duties and the designation obligations; the statute supplies the duty to operate a vigilance system and the confidentiality rule. Read together, they describe a programme built to collect information from many sources rather than to receive a single return from the holder.

Two features matter more than the row count. The reporting duty is not placed at a single point in the supply chain but distributed across institutions, professionals and users, with the health institution acting as collector. The department both receives reports and decides how they are escalated to the Ministry.

3. Expert insights

Insight 1: vigilance duties are gridded, and the company is not the only reporter. Article 51 spreads responsibility across ten levels. Level 8, the user, is any person in the country who knows or suspects an incident or risk involving a device for human use, and level 9, organised society, is also a reporting subject. Exposure therefore depends not only on whether the manufacturer files but on whether hospitals, patient organisations or an individual user file. Treating vigilance as a corporate action underestimates the density of information sources.

Insight 2: suppliers and manufacturers carry the same designation duty in parallel. Articles 52.6.c and 52.7.e use almost identical wording, each requiring at least one qualified professional. This is not one shared post. The supplier’s person answers for devices sold in the country; the manufacturer’s answers for the devices it sells. GRZAN usually splits the two lines between the licensed local proveedor and the overseas quality and regulatory function, and records who receives DNDM correspondence first.

Insight 3: the six criteria are the gate for the 72-hour clock. The a to f criteria in Article 49.1 are not descriptive text. They are the test that triggers the urgent report under Article 56 and the immediate notification to the Ministry under Article 52.3.j. Companies should work through them as a tick-box exercise rather than applying an internal severity scale, because a grade that does not map onto the six criteria produces the wrong answer on whether the deadline applies.

Insight 4: confidentiality is the precondition for the system to work. Article 52.3.b requires protection of the source and identity of the reporter when manufacturers and importers are informed, unless the reporter authorises otherwise. Article 53 makes the investigation file confidential, and the closing paragraph of Article 29 of Ley 90 requires strict confidentiality. The intent of this three-layer arrangement is to lower the reluctance to report. The corollary is direct: a company that tries to identify a reporter through informal channels works against the design of the system.

4. Practical recommendations

• Build the institutional programme before discussing reporting. Article 52.6.b requires suppliers to design and implement the Programa Institucional de Vigilancia. This is a written system, not an ad hoc action. GRZAN recommends a Spanish document with five chapters: identification, classification under the four categories, reporting routes, deadline calculation and records.
• Name individuals and keep the appointment letters. Supplier and manufacturer should each issue a letter stating name, qualifications and contact details, so the file is ready when DNDM writes.
• Turn the six criteria into a worksheet. Six yes or no questions let frontline staff decide whether a case is serious and whether the Article 56 channel opens.
• Do not attempt to identify the reporter. Under Article 52.3.b and Article 53 the source is protected. Root cause work belongs on the product side.
• Build a link with hospital technical units. Article 52.4 makes them a level 4 subject with duties that include registering and managing reports. A simultaneous notification channel prevents the window being consumed before the information reaches the company.

5. Verification checklist

• □ Vigilance officers designated in writing for supplier and manufacturer, with appointment letters retained
• □ Institutional Vigilance Programme documented across identification, classification, reporting, deadlines and records
• □ Classification table built on the four Article 49 categories, with criteria a to f used for serious cases
• □ Quarterly, immediate and semi-annual routes under Article 52.3.i, j and k mapped to responsible departments
• □ Division of labour agreed with the local proveedor and hospital technical units on who reports to whom
• □ Internal rule on protecting reporter identity, with no tracing of reporting sources
• □ Article 29 of Ley 90 on rapid procedures and strict confidentiality written into the procedure

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Panamanian market. Our team manages Ministry of Health (MINSA) sanitary registration applications, prepares Spanish-language dossiers, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com