Decreto 582 de 2017: Amendments to Colombian Device Regulation
Updated: 2026-11-12 · GRZAN Regulatory Team · Verification date 2026-10-20
1. Key takeaways
Decreto 582 de 2017, published on April 4, 2017, is the third and most consequential amendment to Decreto 4725 de 2005. It mainly touched four areas: setting processing deadlines for INVIMA, refining the renewal and change procedures, supplementing the post-market inspection mechanism, and clarifying the rules on suspension and cancellation. Its single most influential provision is the automatic renewal for Class I/IIa established by Art. 32.
The direction of this amendment was to shift the pressure of pre-grant review backward. Combined with Article 57 of Ley 962 de 2005, under which INVIMA must carry out a follow-up control within 15 days after issuance, Colombia formed a grant-first, inspect-later pattern. The GRZAN regulatory team’s judgment is that this lowers the entry barrier while sharply raising post-market compliance demands — obtaining the certificate is the beginning, not the finish line.
2. Legal basis
| Regulation | Instrument number | Date of publication | Article provisions |
|---|---|---|---|
| Decree amending Decreto 4725 de 2005 (Decreto 582 de 2017) | Decreto 582 de 2017 | 2017-04-04 | Sets INVIMA processing deadlines; refines renewal and change procedures; supplements post-market inspection and suspension/cancellation rules |
| Decree amending Decreto 4725 de 2005 (Decreto 582 de 2017) | Decreto 582 de 2017 | 2017-04-04 | Art. 32 (automatic renewal for Class I/IIa) |
| Decree establishing the health registration, marketing authorization and health surveillance regime for medical devices for human use (Decreto 4725 de 2005) | Decreto 4725 de 2005 | 2005-12-26 | Art. 16, Art. 17 (the registration pathway articles amended) |
| Ley 962 de 2005 (basis for follow-up control) | Ley 962 de 2005 | Published in 2005 | Art. 57 (follow-up control within 15 days of issuance) |
| Code of Administrative Procedure and of Contentious Administrative Proceedings (CPACA) | Ley 1437 de 2011 | Published in 2011 | Applicable to correction replies and cancellation procedures |
| Circular on single-window processing of automatic renewals | Circular Externa 100-0361-16 | Issued in 2016 | From 2016-10-03, turnaround shortened from about 30 days to about 3 business days (practical estimate) |
3. Expert insights
#### Statutory deadlines: for the first time, companies can hold INVIMA to the clock
Before Decreto 582 de 2017, INVIMA’s processing time lacked clear statutory constraints and companies could only wait passively. After the amendment, the official review timelines are explicit: automatic registration takes 2 business days and standard registration takes 90 business days, excluding correction rounds. The GRZAN regulatory team considers this the most practically valuable change of the amendment — once deadlines are statutory, processing that exceeds them becomes something companies can formally contest, and the titular can assert its rights through the administrative procedure routes established by Ley 1437 de 2011 (CPACA). The premise is that corrections do not pause the clock: the correction reply period is 90 days (practical estimate: public sources vary between calendar days and business days), and a single unanswered correction is treated as suspension.
#### Automatic renewal drives the maintenance cost of Class I/IIa close to zero
Art. 32 provides that Class I/IIa are subject to automatic renewal. Combined with Circular Externa 100-0361-16, from October 3, 2016 the automatic renewal of Class I/IIa Registro Sanitario certificates has been processed through INVIMA’s single window, with turnaround reduced from about 30 days to about 3 business days (practical estimate) — a difference of an order of magnitude against the 90 business days of standard registration. The GRZAN judgment is that for Class I/IIa products, Colombia’s long-term maintenance cost is extremely low: companies should concentrate resources on the quality of the initial classification determination and the technical file rather than reserving redundant budget for renewals.
#### Grant-first, inspect-later pushes the compliance burden to the post-market phase
Article 57 of Ley 962 de 2005 requires INVIMA to perform a follow-up control within 15 days after issuance, which supports the grant-first logic of automatic registration. The GRZAN regulatory team cautions that under this pattern, what companies lose most easily is not the application stage but the post-market phase: serious adverse events must be reported to INVIMA within 72 hours of awareness (Resolución 4816 de 2008), periodic reports are submitted quarterly, and recalls are executed per INVIMA instructions. The existence of suspension and cancellation rules means a single serious vigilance failure can overturn all prior compliance investment.
4. Practical recommendations
- The GRZAN regulatory team builds a deadline ledger for every application: track automatic registration at 2 business days and standard registration at 90 business days, and launch a written follow-up request the moment a deadline is exceeded.
- The titular should designate a dedicated correction contact and an internal approval chain so that correction replies are completed within 90 days (practical estimate), avoiding suspension from a single missed correction.
- For Class I/IIa products, use the automatic renewal of Art. 32 together with the single-window processing of Circular Externa 100-0361-16, setting the renewal turnaround expectation at about 3 business days (practical estimate).
- Anticipate the follow-up control within 15 days after issuance under Article 57 of Ley 962 de 2005 by archiving the original technical file, label specimens and import records in advance.
- Establish a post-market vigilance mechanism: report serious adverse events to INVIMA within 72 hours, submit quarterly periodic reports on time, and execute recalls strictly per INVIMA instructions.
- Where suspension or cancellation risk arises, assert rights through the procedures established by Ley 1437 de 2011 (CPACA), with the local legal representative (apoderado) acting within the statutory time limits.
- Agree in writing between the foreign manufacturer and the titular on deadlines and responsible persons for vigilance information exchange, so the information chain does not break and reporting does not lapse.
5. Verification checklist
- □ Review timeline expectations have been confirmed by pathway: automatic registration 2 business days / standard registration 90 business days
- □ An internal approval chain for correction replies exists, tracked against a 90-day reply period (practical estimate)
- □ Class I/IIa products have been confirmed as eligible for the automatic renewal of Art. 32
- □ Renewal processing has been confirmed through the single window of Circular Externa 100-0361-16, with turnaround expected at about 3 business days (practical estimate)
- □ The follow-up control within 15 days of issuance (Ley 962 de 2005 Art. 57) has been anticipated and documents archived
- □ A process for 72-hour serious adverse event reporting and quarterly periodic reporting has been established (Resolución 4816 de 2008)
- □ The procedural routes for suspension/cancellation and the local legal representative’s authority to act have been confirmed (Ley 1437 de 2011)
Regulatory information verified as of October 29, 2026
All outward-facing conclusions are based on the current regulatory texts published by the competent authorities and are verified item by item before delivery.
GRZAN provides end-to-end INVIMA registration and compliance support for manufacturers entering the Colombian market, covering timeline management, renewal and change procedures, post-market vigilance and administrative remedies. For inquiries about INVIMA registration in Colombia, contact info@grzanglobal.com.
Disclaimer
Prepared by GRZAN from publicly available regulation. It is provided for general information only and does not constitute legal advice. Legislation and official fees are subject to change by the competent authority.
About GRZAN
GRZAN (Global Regulatory Zone Access Navigator) — the global market-access navigator for medical devices and IVDs.
GRZAN is a specialist consultancy for medical device and IVD market access, providing end-to-end regulatory solutions across the product lifecycle and making international market entry simpler and faster.
Key figures. More than 25 wholly owned subsidiaries worldwide covering 50+ countries and regions; chosen by 100+ listed and leading Chinese device manufacturers, with 4,000+ successful cases; 12+ years in the sector and 200+ regulatory training sessions and seminars delivered.
What we do. Global market access: multi-country registration programmes, technical documentation, regulatory advice. Clinical evidence: clinical evaluation reports (CER), usability studies, overseas clinical investigations. Quality systems: ISO 13485, MDSAP, FDA QMSR and BGMP implementation and audit readiness. Authorised representative and licence-holder services across Southeast Asia, Latin America, the Middle East, Africa, Europe and North America.
Why GRZAN. A real operating entity, with the certificate held by the manufacturer: our direct overseas subsidiaries act as the compliant local holder, so the regulatory relationship stays clear and you keep control rather than being tied to a distributor. Direct access to the team: no time-zone gap, no language barrier, no cultural gap. Review points anticipated: we know what FDA 510(k), EU MDR, Southeast Asian, Latin American and Middle Eastern reviewers look for, which shortens timelines and reduces deficiency letters. Pathway planning: pre-decision analysis and risk assessment before you commit.
Every engagement rests on three commitments: efficiency through pre-submission review, certainty through a clear pathway, and stability through a licence-holder that stays in place.
Take your devices global with GRZAN
We work with manufacturers worldwide to open new markets with a clear regulatory pathway.
Contact us