Brazil Regulatory Hierarchy: Lei, Decreto, RDC and IN — Four Layers and Verification Portals

1. Key takeaways

Brazilian health legislation runs on 4 layers: Lei (statute), Decreto (decree), RDC (board resolution) and IN (normative instruction). GRZAN’s judgment: the real hazard is not forgetting the hierarchy but missing a repeal clause in any layer — Article 66 of RDC n° 751/2022, for example, disposed of 6 items of old rules in one stroke (including parts of IN n° 4/2012).

2. Legal basis

• Basic law on sanitary oversight of health products — Lei n° 6.360/1976, published September 23, 1976, Article 12
• Establishment of the National Health Surveillance Agency and the Brazilian national health surveillance system — Lei n° 9.782/1999, published January 26, 1999, Articles 7, 8 (§1) and 23
• Company operating authorization and local sanitary licensing — Decreto n° 8.077/2013, signed August 14, 2013, published in the DOU and effective August 15, 2013 (Article 26), Articles 2 and 7
• Classification, notification and registration of medical devices, and labeling and instruction-for-use requirements — RDC n° 751/2022, resolution of September 15, 2022, Articles 66 and 67
• UDI database transmission and management — IN n° 426/2026, issued February 13, 2026 and published in the DOU on February 18, 2026, Article 16 (effective March 1, 2026)

3. Expert insights

The division of labor across the four layers is clear. A Lei is congressional legislation setting rights and duties; a Decreto is issued by the President to refine the enforcement framework; an RDC is issued collectively by the ANVISA board and carries the main weight of technical compliance; an IN handles operational detail — forms, parameters, procedures.

The terminology itself is an elegant piece of hierarchy evidence. Article 8, §1 of Lei n° 9.782/1999 uses the phrase equipamentos e materiais médico-hospitalares; at statute level the expression dispositivo médico never appears. The term medical device (dispositivo médico) in general use today was introduced by RDC n° 751/2022. This shows that key technical concepts such as product definition can sink to the RDC layer — and it explains why the same group of products changes its name in materials built on the old law.

The second point is that three dates are not one. Resolution date, DOU publication date and effective date may lie months apart; take RDC n° 848/2024: resolution date March 6, 2024, DOU publication March 8, 2024, with Article 88 providing effectiveness 180 days from publication — the official text does not state the calendar effective date directly, and ANVISA announced the entry into force on September 10, 2024. A ledger that records only one date will almost certainly misplace transition periods.

The third point is not to overlook the lateral branches. Beyond the statutes treated in this series, device compliance touches the following offshoots: RDC n° 585/2021 (an internal ANVISA regulation; Article 187, VI, §1 is the authorizing basis for RDC n° 751), RDC n° 741/2022 (August 10, 2022, the general framework of regulatory reliance), RDC n° 777/2023 (current amendments to RDC n° 751/2022), IN n° 320/2024 (device grouping rules), RDC n° 925/2024 (custom-made and patient-matched devices), and RDC n° 549/2021 (INMETRO conformity assessment for electromedical equipment). Watching one main law alone will drop the branch obligations.

The fourth point is why secondary materials keep presenting the RDC as the sole basis. GRZAN reads it as an illusion of division: the RDC indeed carries technical compliance and is what preparers touch most, but rights and duties sit at the Lei layer and the enforcement framework at the Decreto layer. Take import: Article 12 of Lei n° 6.360/1976 sets the registration precondition and Article 10 requires import to have the prior express consent of the health authority, while Article 2 of Decreto n° 8.077/2013 splits company authorization (AFE) and local sanitary licensing into two parallel preconditions. Miss any of the three layers, and a dossier built only on the RDC will stall at customs clearance or on-site inspection.

The fifth point is to use the retrieval portals by layer. Statute and decree originals are checked on Planalto (planalto.gov.br); the DOU (in.gov.br) is used for publication originals with issue and page numbers, and is the basis for judging effective dates; the ANVISA legislative library (gov.br/anvisa) holds the current consolidated texts of RDCs and INs — that is, as modified by later resolutions; TFVS matter codes and company size are looked up in ANVISA’s Consulta de Assuntos (consultas.anvisa.gov.br). GRZAN’s advice is to keep each portal in its own role and never substitute one for another.

The sixth point is why checking against the current consolidated text is mandatory. An RDC rarely survives long in its published shape: Article 8 of RDC n° 497/2021 was amended by RDC n° 850/2024 so that a CBPF granted through the Medical Device Single Audit Program (MDSAP) is valid for 4 years; the UDI timeline table in Article 15 of RDC n° 591/2021 has been rewritten by RDC n° 884/2024; and RDC n° 751/2022 itself carries the amendments of RDC n° 777/2023. Relying on the originally published PDF hands you provisions that have already been changed.

4. Practical recommendations

• Register the internal ledger by the four layers, recording three fields per entry: resolution date, DOU publication date and effective date.
• Re-check the current status of every cited provision at least quarterly against the DOU (in.gov.br) and the ANVISA legislative library (gov.br/anvisa).
• Verify statute and decree originals against Planalto (planalto.gov.br).
• When citing Lei n° 6.360/1976, Lei n° 9.782/1999 or Decreto n° 8.077/2013, use the original text as published; this series has not checked later amendments article by article, and projects must re-verify against Planalto consolidated texts before landing. The DOU placement of RDC n° 751/2022 has been checked as No. 180 of September 21, 2022 (Seção 1, p. 172) and may be cited; RDC n° 848/2024 has been verified as published March 8, 2024, but issue and page numbers were not obtained this round — cite only the publication date and the 180-day effectiveness clause of Article 88, without a DOU placement.
• When receiving any secondary material, first verify numbers and dates, then check repeal or amendment by later rules.
• When citing RDC n° 751/2022, state the resolution date and DOU placement separately: resolution date September 15, 2022, DOU No. 180 of September 21, 2022 (Seção 1, p. 172) — six days apart, and recording only one date will misplace transition periods.
• ANVISA’s official English translation PDFs may assist against the Portuguese originals; on divergence, the Portuguese text governs.

5. Verification checklist

• □ The ledger is registered by the four layers Lei, Decreto, RDC and IN
• □ Resolution date, DOU publication date and effective date are recorded for every regulation
• □ The 6 items handled by Article 66 of RDC n° 751/2022 are documented
• □ The impact of later amendments such as RDC n° 777/2023 on the main law has been checked
• □ A re-check cycle is set for official channels (DOU, Planalto, ANVISA)

Regulatory information verified as of October 29, 2026.

GRZAN Regulatory Team

GRZAN provides registration and compliance support for medical device and IVD manufacturers entering the Brazilian market, covering regulatory hierarchy mapping, consolidated-text verification, ANVISA dossier preparation and post-market compliance. For assistance with Brazilian regulatory requirements, contact info@grzanglobal.com.