Colombia Automatic Registration and Post-Issuance Control

1. Key takeaways

The 2 business days official period for Class I/IIa automatic registration corresponds to formal verification and certificate issuance, not to technical review. Article 17 moves the center of review from before issuance to after issuance, and the shifted portion is carried by Article 57 of Ley 962 de 2005, under which INVIMA must conduct post-issuance control (control posterior) within 15 days of the issuance date. The moment a company receives the registration certificate is when scrutiny begins, not when it ends.

GRZAN’s judgment is that automatic registration lowers the time barrier to market entry while raising the accountability threshold for the truthfulness of submitted materials. Under a prior-review regime, a defective document is returned for correction; under a post-issuance verification regime, an untruthful document goes directly into cancellation proceedings and liability follow-up. For low and medium-risk products, the 2 business days dividend is real, but it operates on time, not on standards.

2. Legal basis

3. Expert insights

#### The nature of the deadline depends on which side of issuance review happens

To understand automatic registration, review and issuance must be separated into two distinct actions. Standard registration runs review first and issuance second, so the 90 business days period contains technical judgment. Automatic registration runs issuance first and verification second, so the 2 business days period contains only formal judgment. Decreto 4725 de 2005 does not lower the document requirements of Art. 18 and Art. 19 for automatic registration; it changes only the point in time at which those documents are examined. Treating the deadline as the standard is the most typical compliance misjudgment on this pathway.

#### Article 57 leaves the burden of proof with the company

The 15-day post-issuance control window set by Article 57 of Ley 962 de 2005 carries a specific institutional meaning: the administrative act is issued on the completeness and formal compliance of the applicant’s materials, while the authority retains the power to verify substantive content after issuance. This creates an inverted structure — the company first exchanges materials for the certificate, then defends the certificate through continuous compliance. GRZAN cautions that once post-issuance control finds materials inconsistent with reality, the consequence is no longer a single correction: the suspension and cancellation rules supplemented by Decreto 582 de 2017 engage directly, with procedure conducted under Ley 1437 de 2011.

#### Automatic registration files must be built to survive inspection

Under prior review, the reader of the dossier is a reviewer and the goal is persuasion. Under post-issuance verification, the reader is an inspector and the goal is to withstand cross-checking. The preparation methods differ. GRZAN’s practice is to archive the Art. 18 technical documents and Art. 19 legal documents of every automatic registration project at the same depth as a standard registration, maintaining one-to-one traceability between Spanish translations and English originals, and preserving the issuing source and date of every supporting statement. This adds no filing difficulty, but it is decisive when the 15-day window is activated.

#### Post-market performance feeds the next certificate

Under the current regime, registration certificates are valid for 10 years from the date of the administrative act of grant, and renewal must start at least 3 months before expiry. The new draft decree would make validity indefinite, tied to post-market performance, and would move UDI requirements forward to first application. The direction is unmistakable: the one-time entry barrier is falling while the weight of continuous compliance rises. The semantic standards and UDI-DI coding requirements established by Resolución 1405 de 2022 are the part of this shift already in force — an official INVIMA communication of March 12, 2026 confirmed the end of the transition period and the full mandatory status of semantic reporting.

4. Practical recommendations

1. For every automatic registration project, the GRZAN regulatory team maintains a dedicated archive in which the Art. 18 and Art. 19 documents are retained at the same depth as for standard registration, with an index mapping Spanish translations to English originals.
2. Before submission, the titular’s local apoderado completes a formal self-check focused on consistency between the Art. 20 particulars and the power of attorney (Art. 29), preventing formal defects from being amplified after issuance.
3. The quality and vigilance lead builds the reporting mechanism under Resolución 4816 de 2008: serious adverse events reported to INVIMA within 72 hours of awareness, periodic reports submitted quarterly, recalls executed per INVIMA instructions.
4. The importer confirms that the CCAA (Certificado de Capacidad de Almacenamiento y Acondicionamiento) is valid (5 years) and that a technical director (director técnico) is engaged; renewal inspection applications are filed at least 5 business days before expiry.
5. The registration team starts renewal at least 3 months before certificate expiry and reserves turnaround time consistent with the single-window approach of Circular Externa 100-0361-16.
6. Before market release, complete the UDI-DI and GMDN semantic reporting required by Resolución 1405 de 2022, using an issuing agency limited to GS1, HIBCC, ICCBBA, IFA, Ali Health or ZIIOT.

5. Verification checklist

• □ The product’s risk class has been confirmed as I/IIa, so Art. 17 automatic registration applies
• □ Art. 18 technical documents and Art. 19 legal documents have been archived to a depth sufficient for post-issuance inspection
• □ All non-Spanish documents carry official Spanish translations traceable one-to-one to the originals
• □ A response plan and responsible owner exist for the 15-day post-issuance control window
• □ The vigilance mechanism covers 72-hour serious adverse event reporting and quarterly periodic reports
• □ The importer’s CCAA is valid, a technical director is engaged, and the renewal inspection date is scheduled
• □ UDI-DI and GMDN semantic reporting is complete, with the issuing agency on the recognized list
• □ The renewal start date is locked at least 3 months before expiry

Regulatory information verified as of October 29, 2026

All external conclusions rest on the current regulatory texts published by the competent authority, verified provision by provision before delivery.

GRZAN helps manufacturers on the INVIMA automatic registration pathway align fast market entry with airtight post-issuance compliance, covering classification strategy, dossier archiving standards and vigilance readiness for the Colombian market. For inquiries, contact info@grzanglobal.com.