Technovigilance Compliance for Medical Device Holders and Distributors in Mexico: What You Need to Know
A comprehensive guide to technovigilance obligations for medical device registration holders, distributors, and commercializers in Mexico under COFEPRIS.
April 8, 2026
12
min read
By
bioaccess® Team
technovigilance Mexico
tecnovigilancia COFEPRIS
medical device post-market surveillance
adverse incident reporting
COFEPRIS regulations
**Key Takeaways**
- • Technovigilance is mandatory for both registration holders and distributors of medical devices in Mexico
- • A Technovigilance Unit (UTV) must be established and registered with COFEPRIS via CNFV
- • Adverse incidents must be reported through the COFEPRIS online system when specific criteria are met
- • Corrective Field Safety Actions (ACSC) are required when marketed devices present unacceptable risk
- • A five-year technovigilance report (ITV) is required for registration renewal
**Who is this for?**
This guide is for regulatory affairs professionals, quality assurance managers, medical device registration holders, and distributors operating in Mexico who need to understand and comply with COFEPRIS technovigilance requirements under NOM-240-SSA1.
For medical device manufacturers and distributors operating in Mexico, technovigilance (tecnovigilancia) is not optional — it is a regulatory obligation enforced by COFEPRIS. Technovigilance encompasses all activities aimed at monitoring the safety of medical devices in use, including the identification, evaluation, and reporting of incidents and adverse incidents. Registration holders, distributors, and commercializers of medical devices within Mexican territory are all required to comply. Understanding these requirements is essential for maintaining market access and protecting patient safety. Here is what you need to know.
What is technovigilance?
Technovigilance is the post-market surveillance system for medical devices in Mexico. It covers the identification, evaluation, and management of incidents and risk factors associated with medical devices that are already on the market and in use by healthcare professionals and patients.
The system is governed primarily by NOM-240-SSA1, with the upcoming PROY-NOM-241-SSA1-2024 expected to introduce updated requirements. COFEPRIS, through its Centro Nacional de Farmacovigilancia (CNFV), oversees compliance and enforcement of technovigilance activities across all regulated entities.
Who must comply?
Two groups of entities are required to comply with Mexico's technovigilance regulations:
- Registration holders (titulares de registros sanitarios): The legal entities that hold the device registration with COFEPRIS. They bear primary responsibility for post-market surveillance of their registered devices.
- Distributors and commercializers: Entities that distribute or commercialize medical devices within Mexican territory. They must support technovigilance activities and report incidents to the registration holder.
Both groups are required to establish a Technovigilance Unit (Unidad de Tecnovigilancia, or UTV) and designate a qualified responsible person to lead it.
Key responsibilities
| Responsibility | Registration Holders | Distributors / Commercializers |
|---|---|---|
| Establish UTV | Required | Required |
| Designate UTV lead | Required | Required |
| Develop and maintain SOPs (PNOs) | Required | Required |
| Report adverse incidents to COFEPRIS | Required | Report to registration holder |
| Implement Corrective Field Safety Actions (ACSC) | Required | Collaborate with holder |
| Submit 5-year technovigilance report (ITV) | Required | Not required |
Setting up a Technovigilance Unit (UTV)
To register a UTV, the entity must submit a free-form letter (escrito libre) to CNFV via the COFEPRIS CIS system. The submission must include the following information:
- Establishment type (manufacturer, importer, distributor, etc.)
- Owner and establishment data (legal name, RFC, address)
- UTV address and contact information
- Responsible person credentials — must be a health professional with demonstrated technovigilance competence, including professional license number (cédula profesional)
- Declaration of SOP compliance
- Required annexes: operating notice (aviso de funcionamiento), official identification documents (IDs)
**Important: UTV lead qualifications**
The UTV responsible person must be a health professional with demonstrated competence in technovigilance. COFEPRIS may request evidence of training and qualifications during audits or inspections.
Required standard operating procedures (SOPs)
Both registration holders and distributors must develop and maintain specific SOPs (Procedimientos Normalizados de Operación, or PNOs). The required SOPs differ by entity type:
| SOP Topic | Registration Holders | Distributors |
|---|---|---|
| Training and dissemination | Required | Required |
| Duplicate notification detection | Required | Required |
| Technovigilance reports (TV reports) | Required | — |
| Incident investigation | Required | — |
| Adverse incident notification | Required | Required |
| Reception, registration, coding, and archiving | Required | Required |
| Risk-based trend reporting | Required | — |
| ACSC reporting and follow-up | Required | — |
| Safety alert monitoring | Required | — |
Adverse incident notification (NIA)
Adverse incidents must be reported through the COFEPRIS online reporting system. Three criteria must all be met for a reportable adverse incident:
- The incident occurred in Mexico
- There is a causal relationship between the incident and the use of the medical device
- The incident resulted in death or serious health deterioration of the patient or user
After an adverse incident is reported and investigated, possible outcomes include:
- Market withdrawal of the device
- Device modification or redesign
- Software update or patch
- Labeling change or additional warnings
- User notice or safety alert distribution
Corrective Field Safety Actions (ACSC)
A Corrective Field Safety Action (Acción Correctiva de Seguridad de Campo, or ACSC) must be implemented whenever a marketed medical device presents an unacceptable increase in risk to patients, users, or third parties.
The ACSC report must contain:
- Problem description — clear description of the identified safety issue
- Device information — registration number, model, lot number, serial number
- Health risks — assessment of potential harm to patients or users
- Affected client list — inventory of all entities that received affected devices
- Root cause investigation — findings from the investigation into the cause of the issue
- Corrective actions — specific steps taken to address the identified problem
- Prevention actions — measures implemented to prevent recurrence
- Timeline — schedule for implementation of all corrective and preventive actions
Required annexes for ACSC submissions include:
- Safety notice copies — in both the original language and Spanish translation
- Registration copy — current COFEPRIS registration certificate
- Evidence of actions taken — documentation proving corrective actions were implemented
- Unit recovery data — for market withdrawals, detailed tracking of device returns
Five-year technovigilance report (ITV)
Registration holders must submit a quinquennial technovigilance report (Informe de Tecnovigilancia, or ITV) as part of the registration renewal process. Key requirements:
- Must be submitted at least 3 months before the registration renewal date
- First renewal: the evaluation period must cover a minimum of 4 years
- Subsequent renewals: evaluation covers 5-year periods
The ITV report structure includes:
- Cover page with device and registration holder identification
- Brief monograph describing the device and its intended use
- Safety technical sheet (ficha técnica de seguridad) — adverse incidents reported, units sold per year, time on market, estimated number of patients exposed
- Annexes — supporting documentation, trend analysis, and corrective action summaries
Estimating exposed patients
The ITV requires an estimate of patients exposed to the device during the evaluation period. COFEPRIS provides guidance by device type:
- Single-use devices: number of patients exposed equals unit sales during the period
- Reusable devices: estimate the number of uses based on device design specifications and useful life
- Medical equipment: calculate based on the shortest procedure time, extrapolated across the full evaluation period
- Diagnostic agents: calculate from clinical characteristics and sample yield, minus 10% for waste
How bioaccess® can help
bioaccess® supports medical device companies navigating technovigilance and post-market surveillance requirements across Latin America. As a CRO focused on first-in-human studies and regulatory strategy, bioaccess® helps ensure compliance from clinical development through commercialization.
Whether you need to establish a Technovigilance Unit in Mexico, develop compliant SOPs, or prepare your five-year ITV report for registration renewal, bioaccess® provides hands-on regulatory support tailored to your device and market strategy.
Book a meeting
Market access services
Frequently asked questions
BA
bioaccess® · A CRO purpose-built exclusively for first-in-human clinical trials and medical device market access across Latin America.
Mexico overview
Related resources:
- Market access services — /market-access
- COFEPRIS medical device registration — /blog/cofepris-medical-device-registration-mexico
- Clinical trials in Mexico — /clinical-trials-mexico
- LATAM market entry strategy — /blog/us-medical-device-latam-market-entry-strategy-sequence