Colombia is the fourth-largest economy in Latin America with a population of about 52 million. Its universal health system (SGSSS) has broad coverage, and for years roughly 80% of medical equipment has been imported. More importantly, it offers institutional cost advantages: official fees are among the lowest in Latin America, registrations are valid for 10 years, and Class I/IIa devices go through an automatic approval channel. For Chinese manufacturers, this is the most cost-effective first stop into Latin America. Following the application process in order, this article explains the pathways, dossier requirements, fees, UDI, holder structure and compliance essentials.
1. Regulatory Authority and Legal Framework
The competent authority is INVIMA (Instituto Nacional de Vigilancia de Medicamentos y Alimentos), under the Ministry of Health and Social Protection (MSPS), recognized by PAHO/WHO as a regional high-performing regulatory authority. Electronic submissions are made through the Oficina Virtual/SIRIS platform. The core regulations are:
Core Regulations
Decreto 4725 de 2005: the core medical device decree (classification, registration, marketing authorization, sanitary surveillance); its main amendments are Decreto 3275 de 2009 (Article 18: allows a certificate of free sale from a reference country to replace part of the technical documentation), Decreto 1313 de 2010 (removes one document requirement from Article 18) and Decreto 582 de 2017 (sets the 90-working-day review timeline for Class IIb/III and changes post-approval modifications to automatic notification);
Decreto 3770 de 2004: the dedicated decree for in vitro diagnostic reagents (IVD);
Resolución 4002 de 2007: the conditions manual for the CCAA (certificate of importer storage and conditioning capabilities);
Resolución 4816 de 2008: the national Tecnovigilancia adverse event surveillance program;
Resolución 1405 de 2022: the UDI-DI unique identification and semantic reporting standard;
Ley 962 de 2005, Article 57: the legal basis for post-grant surveillance of automatic registrations (the legitimacy of “automatic” approval rests on ex-post review, not exemption from review);
the annual Manual Tarifario: the official fee schedule priced in UVB (updated each year by resolution; for 2026 it is Resolución 2025067543 and its amendments).
Classification Rules
Devices are classified into four classes – I, IIa, IIb and III (no Class IV, unlike Brazil and Argentina), and IVDs are managed separately under three classes (I/II/III). Classification criteria are set out in Article 6 of Decreto 4725, and the classification rules in Article 7 – 18 rules in total, grouped into four sets: non-invasive, invasive, additional rules for active devices, and special rules. This structure derives from the former EU Directive 93/42/EEC (which also had 18 rules), while the EU MDR has expanded to 22 rules; therefore the claim that it is “the same as the MDR” is not accurate, and CE or FDA classification outcomes must not simply be transplanted. Where rules conflict, the highest class applies; multi-purpose devices are classified by their highest-risk intended use; software takes the class of its host device. The I/IIa and IIa/IIb boundaries are the most contentious – a pre-submission classification consultation is recommended.
2. Three Registration Pathways and Statutory Timelines
Pathway 1
Automatic registration (registro sanitario automático, Article 17)
Applies to Class I and IIa devices and Class I and II IVDs. Once the dossier is complete and submitted, INVIMA must issue the registration decision within 2 working days after completing the document evaluation (Article 22(b)); in practice certificates are generally issued within about 15 working days. Products may be imported and sold first, while the authority reserves the right of ex-post review (Ley 962 de 2005, Article 57) – “automatic” does not mean “exempt from review”; a registration whose holder refuses to cooperate with ex-post corrections can be cancelled.
Pathway 2
Standard registration (registro sanitario, Article 16)
Applies to Class IIb and III devices and Class III IVDs. INVIMA completes technical review before approval (document review plus technical assessment, with Class III going through full review by the specialized device committee, Sala Especializada); sale is not allowed without the certificate. The statutory review timeline is 90 working days (Decreto 582 de 2017, Article 1), counted from the day both the technical and legal requirements are complete; the period for responding to deficiency requests is not counted in the review clock.
Pathway 3
Marketing permit (permiso de comercialización, Articles 23/24)
Reserved for biomedical equipment using controlled technologies (ionizing radiation, lasers, etc.), regardless of risk class; spare parts for repair are equally covered.
⚠️ Deficiency mechanism
INVIMA usually issues only one deficiency request (requerimiento); the applicant must respond within 90 days, otherwise the application is deemed abandoned and the file voided. This means the ability to “answer everything in one round” directly determines project success – prepare the deficiency response as if it were a second submission, not a step-by-step probing exercise.
Timeline note: statutory timelines (2 working days for automatic registration, 90 working days for standard registration) are not the same as actual timelines. Industry practice: Class I/IIa about 1-3 months; Class IIb/III about 5-9 months, with Class III potentially exceeding 12 months during review backlogs. Each deficiency round typically adds 1-3 months, so plan the schedule on “actual timeline plus one deficiency round”.
3. Dossier Checklist: Technical Part and Legal Part
🔧 Technical part (Article 18)
- Application form (signed by the technical director): product name, specifications, manufacturer, registration modality, service life, risk class, intended use, international codes (GMDN/ECRI), warnings and contraindications;
- Copy of the quality system certificate (ISO 13485:2016 is the evidence generally accepted by INVIMA; not mandatory for Class I/IIa but strongly recommended, and in practice required for Class IIb/III; the certificate scope must cover the manufacturer and the production site of the products being registered);
- Product description: main components, composition, specifications, working principle;
- Technical studies on the design and the finished product, summaries of verification and validation, and test reports;
- Sterilization method and disposal method (where applicable);
- Label and instructions-for-use drafts; a declaration of the Spanish-language operation and maintenance manuals for biomedical equipment;
- Class IIa and above: scientific information supporting safety, risk analysis, and a list of applicable standards;
- Class IIb/III: clinical use study data (Class IIa may rely on technical rationale or a literature review; Class IIb requires relatively complete clinical data, and copies of CE or FDA certification documents are acceptable; Class III requires complete clinical evidence);
- Certificate of free sale (CFS) – under Article 29(b), this should be a marketing or manufacturing authorization issued by the competent authority of the country of origin (for Chinese manufacturers, the relevant NMPA certificate); if the product is not marketed in the country of origin, a certificate of free sale from a reference country (the EU, the USA, Canada, Japan, Australia, or a country with a mutual recognition agreement with Colombia) must be submitted. Under the Decreto 3275 de 2009 amendment, Classes I-IIb may use a reference-country CFS to replace part of the technical and clinical studies.
⚖️ Legal part (Article 19)
Applicant name and proof of existence/legal representation, power of attorney (POA), and proof of fee payment. All documents must be in Spanish.
🔍 Four high-frequency deficiency points
1) Expired CFS – obtain it close to the submission date; the authentication chain is Apostille plus Spanish translation by an official translator (traductor oficial); since November 2023 China can issue the Apostille certificate directly, without consular legalization;
2) Inconsistent information across documents –
4. Official Fees and UDI: Two Hard Costs Easily Underestimated
💰 Official fees (priced in UVB, adjusted annually)
Under the 2026 schedule: Class I/IIa registration and renewal about COP 3,898,330 (321.91 UVB); Class IIb/III about COP 4,412,400 (364.36 UVB); marketing permit for controlled-technology equipment about COP 4,455,511 (367.92 UVB); IVD Class I/II about COP 2,570,590 and IVD Class III about COP 3,427,327; changes of legal nature about COP 826,546 and changes of technical nature about COP 1,060,243.
At current exchange rates this is roughly USD 900-1,400 per product – these are official fees only, excluding the local legal representative, official translation, Apostille authentication, testing and other third-party costs; the all-in cost is typically USD 2,000-3,000 or more per product. Both the UVB and the exchange rate are variables, so quotes and budgets must state the pricing date.
🏷️ UDI-DI (Resolución 1405 de 2022)
This is the item with the greatest impact on existing certificates and the one most easily overlooked. The resolution requires all devices and IVDs marketed in Colombia to complete UDI-DI coding and submit semantic reports (covering basic, regulatory and commercial attributes), with the following phased milestones:
- Products certificated from February 8, 2024 onward must complete it before commercialization;
- February 8, 2025: Class III;
- August 8, 2025: Class IIb and IVD Class II;
- February 8, 2026 (deferred to February 9 because of a public holiday): Class IIa, Class I and IVD Class I.
Recognized issuing agencies: GS1, HIBCC, ICC BBA, IFA, ZIIOT. Without completion, products cannot be commercialized and registrations may be deemed non-compliant – existing certificate holders should immediately verify their record status on the INVIMA platform.
5. Holder and Import Structure: Four Roles You Must Keep Apart
The biggest difference between Colombia and the EU lies in the separation of roles:
Titular (registration holder): the entity named on the registration certificate (Article 20 requires the certificate to state its name and address)
Apoderado/legal representative: the Colombian local agent that foreign manufacturers must appoint, responsible for filing the application, receiving official correspondence, responding to deficiency requests, and handling local regulatory liaison;
Fabricante (manufacturer): the foreign manufacturer, which issues a POA authenticated by Apostille and translated into Spanish;
Importador (importer): responsible for import, storage and distribution; it must hold a valid CCAA (valid for 5 years, must employ a technical director (director técnico), and is subject to INVIMA inspection).
One perception that must be corrected: the current Decreto 4725 does not require the Titular to be a Colombian local entity – the certificate may name the foreign manufacturer as holder, with a local legal representative filing on its behalf; in practice most companies still choose a local importer or local agent as holder. What is truly unavoidable is that “a local legal representative must be appointed” and “the importer must hold a CCAA”.
One caveat: the replacement decree draft published in 2026 would explicitly require the Titular to be domiciled in Colombia; once it takes effect, “local holding” will shift from common practice to a statutory requirement – companies designing their holder structure now should factor this variable into their contracts in advance.
💼 Commercial tip
Make sure the distribution agreement clearly covers four things: ownership of the registration certificate, access to the dossier, responsibility for safety reporting, and exit and transfer clauses. Also note one time cost: a change of holder in Colombia is not a “transfer of title” but an application to INVIMA for assignment of the registration (Cesión del Registro), which in practice takes about 3-6 months. This means that if channel negotiations break down, the certificate does not automatically revert to the manufacturer – agreeing on this before signing beats negotiating after a dispute.
6. Compliance Essentials and Post-Market Obligations
1) CE/FDA are acceleration levers, not passes: CE technical documentation and FDA 510(k)/PMA data can serve as supporting evidence to reduce deficiency rounds, but they do not change the statutory review clock, and INVIMA registration must still be completed;
2) The registration certificate is valid for 10 years (Article 31), and renewal must be filed at least 3 months before expiry (Article 32); missing the window means the application is treated as a new one, with the clock and the fees restarting. IVDs have separate rules: Class I/II are valid for 10 years and Class III for 5 years, with renewal filed at least 6 months before expiry (Decreto 3770, Article 21);
3) At every import, the registration certificate and the CCAA must both be valid, and import permits are processed through the VUCE single window – “ship first, register later” does not work in Colombia;
4) Changes are divided into changes of legal nature and changes of technical nature, with separate official fees; no change may be self-executed without approval; general post-approval changes may follow the automatic notification route under Decreto 582 de 2017, but they must still be reported – “no need to report” is a misconception;
5) Tecnovigilancia (Resolución 4816 de 2008): serious adverse events must be reported within 72 hours, non-serious events must be summarized and reported quarterly, and coverage extends to events occurring worldwide; recalls follow INVIMA instructions with progress reported; implantable devices require an implant card for every patient. IVDs have separate rules: adverse events must be reported immediately, no later than 5 days after awareness, and summarized quarterly;
6) Keep monitoring the progress of the draft Unified Device Decree.
New Decree Draft Progress (as of October 2026)
The draft published in January 2026 (about 16 chapters and 180 articles) would replace both Decreto 4725 de 2005 and Decreto 3770 de 2004; the WTO/TBT international notification was completed on May 18, 2026, with comments due on July 17; it has not yet been enacted, and the draft provides for an 18-month transition period. Key changes:
- 1) A three-tier authorization model – sanitary notification (low/medium risk), sanitary registration (high/very high risk), and marketing permit (controlled technologies);
- 2) Validity would change from a fixed 10 years to “indefinite, linked to post-market performance”, moving from periodic renewal to continuous compliance;
- 3) ISO 13485 would be explicitly designated as the device GMP standard;
- 4) A reliance mechanism recognizing the assessment outcomes of foreign regulators such as the FDA, EMA and ANVISA would be written in;
- 5) IVDs and standalone software (SaMD) would be brought into a unified framework;
- 6) UDI requirements would be moved forward to the initial application;
- 7) The Titular would be required to be domiciled in Colombia.
Current submissions still follow Decreto 4725 – do not wait for the new rules.
Colombia’s value lies in “reusable evidence, affordable cost, predictable timeline”. Getting the classification criteria right, negotiating the holder structure upfront, and building the dossier to a “CE/FDA evidence reusable” standard is the most efficient way to open up this market.
Disclaimer: This article is compiled from public INVIMA regulations and official information (regulations verified as of October 30, 2026) and does not constitute legal advice. Official fees are adjusted with the UVB and exchange rates; the classification, documentation requirements and review timelines for a specific product must follow INVIMA’s current provisions and case-by-case decisions.