INVIMA (Colombia)

The Instituto Nacional de Vigilancia de Medicamentos y Alimentos (INVIMA) is Colombia’s national regulatory authority for health products. Established by Law 100 of 1993 and regulated under Decree 1290 of 1994, INVIMA operates as a public scientific and technical establishment with administrative and financial autonomy under the Ministry of Health and Social Protection. Its remit spans human and veterinary medicines, biologicals and vaccines, medical devices and IVDs, cosmetics, foods and dietary supplements, and household hygiene and cleaning products.

Headquartered in Bogotá, INVIMA coordinates specialized technical directorates for medicines and biologicals, medical devices, food and beverages, cosmetics, sanitary surveillance, operations, and laboratory networks. It manages the Red Nacional de Laboratorios and convenes expert advisory committees, including the Sala Especializada de Medicamentos y Productos Biológicos and other specialist salas. With national jurisdiction, INVIMA also maintains presence at key ports of entry to enforce import controls and risk-based sampling.

Internationally, INVIMA is recognized as a WHO/PAHO Regional Reference Authority for the Americas and a WHO Listed Authority. It participates in the WHO Prequalification Collaborative Registration Procedure, is an Affiliate Member of the International Medical Device Regulators Forum (IMDRF), and is a PIC/S applicant for GMP convergence. For manufacturers, these designations signal mature regulatory practice, openness to reliance, and harmonization with global benchmarks.

In practice, this means Colombia’s pathways combine national requirements with opportunities to leverage external assessments, particularly for medicines, vaccines, and high-risk devices. Post-authorization, ongoing pharmacovigilance, device vigilance, and sanitary surveillance are central to compliance, supported by risk-based inspections and corrective actions governed by Colombian administrative law and technical standards. Sponsors should plan for full lifecycle duties from dossier submission through post-market-surveillance.

INVIMA’s scope covers products that can impact human or animal health, whether they are manufactured domestically or imported. Medicines and biologicals include conventional pharmaceuticals, vaccines, blood-derived products, biosimilars, and immunotherapies. Medical devices and IVDs range from low-risk disposables and software to implantables and high-complexity diagnostics. Cosmetics encompass personal care items that act without therapeutic intent. Foods and dietary supplements include conventional foods, fortified foods, special purpose foods, and supplements. Household hygiene and cleaning products with sanitary risk also fall within its oversight.

Risk classification is the backbone of regulatory expectations, defining depth of technical evidence, conformity processes, and surveillance intensity. Medicines and biologicals are evaluated on benefit–risk, quality, safety, and efficacy, with heightened scrutiny for sterile and parenteral products and for novel modalities. Devices and IVDs follow a risk-based framework aligned with international rules. Higher classes and products with systemic exposure, invasive use, or critical diagnostic impact entail stricter premarket review, more robust quality management, and tighter post-market controls.

The classification decision shapes document architecture and validation strategy. For devices and IVDs, mapping indications, intended users, use environment, and duration of contact is critical for determining the premarket route, essential principles coverage, and clinical or performance evidence needs. For foods and cosmetics, risk hinges on composition, claims, and route of exposure, with distinct pathways for notification, sanitary registration, and ingredient authorization where applicable.

Careful scoping at the outset prevents costly rework. Sponsors should create an evidence plan that matches risk class, technology novelty, and claim strength, and then build the dossier and controls accordingly. For devices, understanding Colombia’s alignment with international risk rules aids efficient scoping; see medical-device-classification for foundational concepts that translate into Colombian expectations.

INVIMA grants marketing authorizations for new chemical entities, generics, and biological products including vaccines and biosimilars. Applications are assessed on administrative completeness, quality and GMP compliance, nonclinical safety, and clinical efficacy and safety. Quality modules are expected to reflect ICH structure and substance-specific standards, with robust control strategies, method validation, and stability programs suitable for Colombia’s climatic conditions and distribution realities.

Reliance mechanisms can streamline review. When a product is listed by WHO Prequalification or has assessment reports from stringent reference authorities, INVIMA may leverage those evaluations to focus national review on local benefit–risk, quality comparability, labeling, and pharmacovigilance readiness. For vaccines and priority public health products, participation in WHO’s Collaborative Registration Procedure facilitates synchronized post-listing updates and signal management.

Biosimilars follow stepwise evidence based on analytical similarity, nonclinical justification, and focused clinical data where residual uncertainty remains. Generics hinge on bioequivalence and pharmaceutical equivalence. For both, impurity qualification and control are central; alignment with internationally harmonized impurity frameworks strengthens submissions and post-approval change management.

To reduce review friction, structure impurity justifications against harmonized expectations and provide clear comparability narratives for any process evolution. See ICH impurity guidance for drug substance and drug product to anchor specifications and lifecycle updates. Sponsors should also document pharmacovigilance governance and signal handling in alignment with national systems and global risk plans.

Relevant harmonized references include ich-q3a-impurities-drug-substance and ich-q3b-impurities-drug-product, as well as WHO collaborative registration resources and GMP expectations published for international convergence.

Device and IVD registrations in Colombia are risk-based and align with global principles. Sponsors must define the intended purpose, user profile, use environment, and duration of contact, then classify the product and assemble evidence accordingly. Core technical documentation includes device description, design and manufacturing information, risk management, verification and validation, clinical or performance evidence, labeling, and post-market plans. For software and connectivity, cybersecurity, data integrity, and change control records are expected.

Quality management systems are assessed through certificates and evidence of effective process controls. ISO 13485 conformity, cleanroom and sterilization validation for sterile products, biocompatibility, electrical safety, and software life cycle files are commonly requested artifacts. For IVDs, performance evaluation, analytical sensitivity and specificity, and clinical performance data must match claims and risk. Unique Device Identification adoption via global standards supports traceability in distribution and recalls.

Lifecycle control continues after registration. Changes that affect safety or performance require variation filing and approval prior to implementation, while minor changes should be documented within the QMS. Vigilance systems should capture complaints, incidents, field safety corrective actions, and trends, feeding back into risk management and usability engineering. Clear instructions for use in Spanish, with symbols and warnings aligned to Colombian requirements, are necessary for safe deployment.

Colombia aligns with international design and safety principles, so structuring the submission against globally recognized essential principles accelerates review. Map claims, hazards, and mitigations in the evidence matrix, and ensure IFUs reflect intended use and residual risk. For background and templates, see imdrf-essential-principles, instruction-for-use-ifu, and development planning concepts in medical-device-development-phases.

INVIMA distinguishes between medicines and non-therapeutic categories such as foods, dietary supplements, cosmetics, and household hygiene products. This separation determines claim boundaries, premarket pathways, and evidence types. Foods and dietary supplements require sanitary registration or notification depending on risk and composition, with particular scrutiny on additives, fortification levels, and products aimed at vulnerable populations. Cosmetics undergo notification or registration pathways based on formulation and risk, and must demonstrate safety under normal or reasonably foreseeable use.

Dietary supplements cannot be positioned as drugs and must avoid disease claims. Substantiation for structure or function must be truthful, not misleading, and anchored in the product’s formulation and daily intake. Labeling in Spanish, ingredient listing, allergen declarations, and precautions are central to compliance. For imported products, equivalence of nomenclature and additive status must be reconciled against Colombian positive and conditional lists.

Household hygiene and cleaning products with sanitary risk, such as disinfectants, face composition and efficacy requirements tailored to their intended use and spectrum. Efficacy testing for antimicrobial products should reflect the claimed activity, while safety assessments must consider vulnerable users and cumulative exposure. Packaging and closures must maintain integrity through distribution and storage, with attention to child safety where applicable.

Strategic planning for non-therapeutic categories often follows regional practices to optimize dossier reuse. Sponsors should define claim strategy early, align evidence and labeling to Colombian norms, and plan for market surveillance and complaint handling commensurate with risk. For practical orientation, see latam-supplement-registration for pathways and claim limits, the boundaries described in structure-function-claim, and packaging integrity considerations in tamper-evident-packaging-supplements.

INVIMA enforces Good Manufacturing Practices through risk-based inspections of domestic sites and recognition of foreign GMP evidence in reliance scenarios. The agency’s inspection scope spans quality management, premises and equipment, materials management, production and in-process controls, laboratory controls, validation, qualification, and data governance. For sterile products and biologics, environmental monitoring, aseptic processing, and contamination control strategies are emphasized.

Where permissible, reliance on inspections by reference authorities or participation in PIC/S-supported convergence can reduce duplication, though INVIMA retains authority to conduct its own audits or targeted verifications. The Red Nacional de Laboratorios underpins market surveillance with confirmatory testing for quality defects, falsification risk, and contamination events. Sampling at manufacturers, distributors, and ports of entry supports risk-based oversight across the supply chain.

Sponsors should anticipate data governance and traceability questions. Audit trails, contemporaneous recording, validated computerized systems, and secure backups are expected. For biologics, comparability exercises and reference standards management receive additional scrutiny. Contract manufacturers and critical suppliers must be qualified, with technical agreements defining responsibilities and change control.

Alignment with global GMP expectations strengthens readiness and dossier credibility. Reference WHO consensus GMP guidance for system design, consider the trajectory of PIC/S guidance for sterile operations, and implement controls that demonstrate data integrity by design rather than retrofit. For orientation, consult who-gmp-trs-1044-2022 and build quality systems to embody data-integrity-by-design principles throughout the product lifecycle.

INVIMA maintains presence at major ports and border crossings to enforce import controls for regulated products. At air, sea, and land entry points, consignments are checked for licensing alignment, labeling, and sanitary status. High-risk products and those with incomplete documentation may be sampled or detained pending verification. Cold chain performance, integrity of seals, and transport conditions are examined for temperature-sensitive goods such as vaccines and biologics.

Before importation, importers must ensure that the foreign manufacturer, product, and local holder are authorized and that certificates, lot-specific documents, and transport records match the Colombian approval. For medicines and vaccines, batch release by an authorized control laboratory or recognized certification may be requested based on risk. For devices and IVDs, labeling in Spanish and compliance with registered models and accessories are scrutinized. Discrepancies trigger holds, corrective actions, or re-export orders.

Practical readiness hinges on document accuracy and chain-of-custody transparency. Pre-alerts to customs brokers and alignment of invoices, packing lists, and sanitary permits reduce dwell time. When INVIMA orders sampling, importers should be prepared for time-bound storage, maintenance of environmental controls, and prompt submission of test reports or certificates. Robust recordkeeping supports faster clearance and minimizes demurrage risk.

• Commercial invoice, packing list, and transport documents matching the registered product identity and presentation
• Valid marketing authorization or sanitary registration, and importer’s operating license
• GMP, ISO 13485, or equivalent quality certificates aligned to the submitted dossier
• Certificates of analysis or batch release, especially for vaccines and sterile products
• Temperature logs and evidence of cold chain integrity for sensitive goods
• Labeling and IFUs in Spanish consistent with the approved content
• Evidence of traceability and chain-of-custody from manufacturer to consignee

After authorization, INVIMA requires proactive surveillance. Marketing authorization holders must operate pharmacovigilance systems for medicines and biologics, device vigilance systems for devices and IVDs, and sanitary surveillance mechanisms for foods, cosmetics, and household products. These systems should capture adverse events and incidents, evaluate causality, trend signals, and trigger corrective and preventive actions proportionate to risk.

When field issues arise, sponsors must assess the need for communications, labeling updates, software corrections, or physical corrections and removals. Colombia expects structured root cause analysis, risk evaluation, and timely regulatory notifications. Field Safety Notices and recalls are coordinated with INVIMA to ensure effective lot identification, retrieval, and disposition. In parallel, process and design controls should be corrected to prevent recurrence, with emphasis on supplier controls when defects originate upstream.

INVIMA’s enforcement toolkit includes administrative sanctions, suspension or cancellation of authorizations, import holds, and product seizure in egregious cases. Cooperation with law enforcement addresses falsification and diversion risks. Robust serialization or traceability practices where implemented can accelerate recall execution and reduce patient and consumer exposure. Alignment between global and Colombian risk management plans ensures consistency and efficiency when issues cross borders.

Sponsors that pre-plan recall logistics, customer communications, and data capture perform better when time is critical. Digitally linking distribution records to product identity supports rapid scoping and regulatory reporting. Technology that structures deviations, CAPA, and evidence files can shorten cycles and minimize operational disruption during a crisis. Consider modernizing recall execution with tools designed for recall-management, coupled with metrics to verify field effectiveness.

INVIMA is a co-leader in Andean Community (CAN) pharmaceutical harmonization and an active participant in Pan American regulatory initiatives. This regional positioning enables the agency to converge on dossier structures, GMP expectations, and reliance practices that reduce duplication while preserving local benefit–risk assessment. For manufacturers serving multiple Andean markets, harmonized core files with localized administrative modules and labeling annexes are an efficient strategy.

For medicines and vaccines, WHO’s Collaborative Registration Procedure and reliance on assessments by stringent regulatory authorities help compress timelines and align post-approval safety updates. For devices and IVDs, reliance on international certificates, test reports, and conformity assessment outputs supports faster recognition in Colombia, subject to national verification. Regional working groups foster convergence on vigilance terminology, incident thresholds, and field action coordination.

Sponsors should watch for updates from Andean working parties and national implementations, as reliance policies can evolve with experience and public health priorities. Building core dossiers that anticipate divergent labeling, language, and serialization needs makes localization less risky. When planning staggered submissions, track the knock-on effects of variations across jurisdictions to maintain consistency, especially for sterilization cycles, software versions, and validated shelf life.

Neighboring authorities within CAN, such as DIGEMID in Peru and ARCSA in Ecuador, are frequent comparators for operational planning and dossier reuse. For context on adjacent requirements and practical read-across opportunities, see peru-digemid.

Operationalizing INVIMA compliance requires synchronized control of documents, training, batches, equipment, suppliers, change control, and vigilance evidence. Manufacturers frequently underestimate the effort to maintain submission-ready traceability from development through commercialization, especially when leveraging reliance pathways that emphasize data integrity and comparability. V5 Ultimate consolidates these moving parts in a single system of record, enabling teams to demonstrate control during submissions, inspections, and post-market events without resorting to ad hoc spreadsheets.

For medicines and biologics, V5 structures batch records, analytical method validation packages, stability studies, and deviation histories so they align with ICH quality modules and INVIMA inspection expectations. For devices and IVDs, technical documentation can be mapped to essential principles, with verification, validation, and labeling evidence linked to risk controls and release workflows. For foods, supplements, cosmetics, and hygiene products, specification management, supplier qualification, and complaint handling are integrated to support sanitary surveillance and rapid field action when required.

During imports and distribution, V5’s traceability spine records chain-of-custody, environmental conditions, and lot genealogy, so recall boundaries are precise and verifiable. Structured deviations and CAPA, paired with audit trails and secure electronic signatures, provide confidence for inspectors that quality decisions are timely and documented. Teams can perform self-inspections, assemble submission annexes, and generate evidence packets that mirror Colombian dossier structures, reducing last-minute scrambles.