Peru BPM, BPA, BPD and GTP Certificates: The Four-Certificate Matrix and Its Maintenance

Regulatory information verified as of October 29, 2026

1. Key takeaways

The Peruvian compliance certificate is a matrix of four certificates, not a single general qualification: Good Manufacturing Practices (Buenas Prácticas de Manufactura, BPM), Good Storage Practices (Buenas Prácticas de Almacenamiento, BPA), Good Distribution and Transport Practices (Buenas Prácticas de Distribución y Transporte, BPD) and Good Tecnovigilance Practices (Buenas Prácticas de Tecnovigilancia, GTP), each anchored to a different manual and fitted to a different role in the chain. The final guideline for GTP has not yet been adopted, and its details remain subject to the official publication. What the four share is that failure is not a single event of certificate expiry, but a chain reaction transmitted downward through the operating authorization, the sanitary registration and the penalty ladder. Regulatory information verified as of October 29, 2026.

2. Legal basis

On the validity periods and recertification cycles of the good practices certificates, GRZAN has not verified definitive article numbers; this article makes no numerical assertions, and the official publication of DIGEMID and MINSA prevails.

3. Expert insights

Insight 1 | Which certificate binds whom depends on the entity’s position in the chain

The logic is functional: whoever manufactures falls under BPM; whoever stores falls under BPA; whoever transports and distributes falls under BPD; whoever bears vigilance duties falls under GTP. A single wholesale distributor (Droguería) may simultaneously fall under 3 items (BPA, BPD, GTP), while a laboratory (Laboratorio) that also manufactures must add BPM on top. Misreading the certified entity against the actual function means discovering in an inspection that an entire functional link has no supporting certificate — which is why a functional mapping is always our first step when restructuring certified structures (including the scenario recorded in secondary sources as D.S. N° 020-2024-SA, pending first-hand verification).

Insight 2 | Maintenance means continuous conformity, not renewal at expiry

The review focus of certificate maintenance is the trace of daily operation: temperature and humidity records with deviation handling, equipment calibration and maintenance, personnel training and role competence, complaint and recall ledgers, change control and self-inspection reports. Mechanically, inspectors come looking for counter-examples against the manual clauses; they do not wait for the company to submit a stack of new documents. We usually set the top three deficiencies exposed in a client’s self-inspection checklist — most often unclosed deviations and disconnected training — as the remediation priorities, because each points directly at whether the system is genuinely executed.

Insight 3 | Failure consequences propagate upward through the certificate matrix

The transmission path runs: good practices certificate cancelled, then the entity no longer holds the qualification for that function, then the compliance basis of the operating sanitary authorization is impaired, and finally the sanitary registration applications or changes that rely on that entity lose support, potentially triggering the measures of cancellation of good practices certificates, suspension or cancellation of sanitary registration described in article 48 of this series. A critical time window therefore exists: the cost of early intervention while a certificate anomaly is still contained is far lower than the cost of rebuilding a supply chain after a registration has been suspended. In client management systems we require a red-yellow-green status board for certificate health, rather than administrative staff passively waiting for notices.

4. Practical recommendations

1. Perform the functional mapping first: list every function of the company across manufacturing, storage, transport and vigilance, and match each function to the required certificate.
2. Maintain a dual ledger for each certificate — expiry reminders plus a maintenance-evidence checklist — locking the self-inspection and remediation window in advance.
3. Run self-inspections clause by clause against the manual, focusing on the three high-frequency deficiency points: deviation closure, equipment calibration and training effectiveness.
4. For cold-chain devices, additionally verify temperature mapping studies and the handling records of excursions, aligned with BPA and BPD requirements.
5. When third-party storage and transport are engaged, require the provider’s certificates to remain in force and fix in the agreement a duty of immediate notification, to avoid passive lapses.
6. Integrate certificate status into the supply-chain continuity plan: once any certificate shows an anomaly, the substitute entity and the switch path are defined in advance.

5. Verification checklist

□ The functional mapping has been completed, and the number of good practices items applicable to the company’s position in the chain is defined (regulatory information verified as of October 29, 2026).

□ The status and applicable manual basis of the 4 qualifications — BPM, BPA, BPD and GTP — have been confirmed.

□ The manual bases have been registered: R.M. N° 204-2000-SA/DM (2000-06-23), R.M. N° 132-2015/MINSA (2015-03-02), R.M. N° 833-2015/MINSA (2015-12-23), R.M. N° 539-2016/MINSA (2016-07-27).

□ The GTP status has been confirmed: the final guideline has not been adopted, and all related items are marked as subject to the official publication.

□ No definitive article number has been verified for certificate validity periods and recertification cycles, and no figures are asserted in the documents.

□ Maintenance evidence (deviation closures, calibration records, training ledgers, self-inspection reports) has been archived within the validity period.

□ A contingency plan with substitute entities and supply-chain switch paths exists for certificate anomalies.

Regulatory information verified as of October 29, 2026.

GRZAN provides medical device registration and post-market compliance support in Peru for manufacturers, importers and authorized representatives. For assistance, contact info@grzanglobal.com.