General Health Law Reform 2026 and Post-Market Requirements in Mexico

1. Key takeaways

The amendment decree to the General Health Law published in the DOF on 2026-01-15 (effective the following day) contains three provisions directly relevant to medical devices. Article 262 Bis elevates post-market surveillance from guidance to a statutory requirement and makes clear that the activity begins from the issuance of the registration. Article 376 extends the validity of subsequent renewals from 5 years to up to 10 years. Article 396, item I, expands the means of verification from on-site inspection to written or electronic means. In addition, Articles 71 Bis through 71 Octies introduce new rules for digital health and telemedicine. The RIS amendment decree of DOF 2026-04-24 supplies the implementing renewal provisions, but its 10-year first renewal currently reaches only domestically manufactured devices, which importers must keep in view.

• The amendment decree was published on 2026-01-15 and entered into force on 2026-01-16.
• Article 262 Bis makes post-market surveillance statutory from the date the registration is issued.
• Article 376 keeps the first registration at 5 years and allows subsequent renewals of up to 10 years.
• Article 396, item I, allows verification by written or electronic means.
• Articles 71 Bis to 71 Octies set rules for digital health and telemedicine.

2. Legal basis

The reform operates on two levels: the health law itself, amended by the decree, and the health inputs regulation, amended later to supply the implementing renewal provisions. The two instruments were published nearly three months apart, and the earlier decree already carried direct obligations for devices from the day after publication. The table below lists each instrument, its provision, and its content, and the gap between the two publication dates matters for any project that spans them.

3. Expert insights

Insight one: post-market surveillance has entered the statutory layer. Tecnovigilancia previously sat mainly at the level of NOM-240-SSA1-2012 and guidance documents. Article 262 Bis writes it into the law itself and states that the activity begins on the date COFEPRIS issues the medical device registration. Registration now equals obligation, and there is no longer a buffer period in which the unit can be left unestablished while the company gets organised. Compliance calendars should treat the issuance date and the vigilance start date as the same date, with staff and procedures ready before the certificate arrives.

Insight two: the renewal extension reduces administrative frequency. With subsequent renewals available for up to 10 years, the number of renewal interactions with the regulator falls, and with it the probability of cancellation caused by missing a renewal deadline. The saving is not only in fees but in the reduced coordination burden on regulatory teams that previously rebuilt renewal dossiers every five years, freeing that capacity for change management instead.

Insight three: electronic verification raises the bar for document retention. Article 396, item I, permits verification by written or electronic means. The quality of a company’s technical documentation, vigilance records, and label version management becomes directly reviewable at a distance, which means document hygiene is now a standing audit exposure rather than a pre-inspection sprint. Teams should be able to produce any technical file, vigilance record, or label version on request without a reconstruction effort.

Insight four: the digital health provisions reach software and telemedicine. Articles 71 Bis to 71 Octies set rules for the use of algorithms and platforms in health services, which brings diagnostic applications and telemedicine platforms into scope for scrutiny. Software manufacturers should read these provisions alongside the device classification rules rather than treating them as separate legal territory, since the same product may now be touched by both bodies of rules.

Insight five: the implementing regulation lags the law. The RIS amendment decree (DOF 2026-04-24) grants the 10-year first renewal under Article 190 Bis 3 only for domestically manufactured devices at present. Devices manufactured abroad are not yet covered, and further additions need to be tracked, so importers should keep budgeting on the 5-year assumption until the rule is extended. The gap between the January decree and the April RIS amendment is a window in which applicable rules differ by product origin, and any project spanning it should record which version it relied on.

4. Practical recommendations

• Align the start of the tecnovigilancia unit with the date of registration issuance, without deferral.
• Build the documentation management system to a standard of remote inspectability, with clear versioning and indexing throughout, so that any record can be located and produced quickly.
• Recalculate long-term budgets on the structure of first 5 years plus subsequent 10 years, and keep the 5-year assumption for imported products while tracking the supplementary rules.
• Assess the applicability of Articles 71 Bis–71 Octies for software and telemedicine products.
• Handle transition-period projects under the rules in force at the time of submission; the RIS amendment decree states that applications filed before its entry into force are processed under the previous provisions until closure.

5. Verification checklist

• □ The decree date DOF 2026-01-15 and entry into force 2026-01-16 have been recorded
• □ The tecnovigilancia start date is aligned with the registration issuance date
• □ The documentation system is built to a remotely inspectable standard
• □ Renewal budgets have been recalculated on the 5-year / 10-year structure
• □ Software and telemedicine products have been assessed against the new provisions
• □ Transition-period projects are handled under the previous rules

Regulatory information verified as of 28 October 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the Mexican market. Our team manages COFEPRIS registrations and equivalence (equivalencia) reviews, coordinates third-party authorised centre routes, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com