Medical Device Risk Classification in Colombia: Class I, IIA, IIB and III

Risk classification groups medical devices into four classes (I, IIA, IIB and III) according to the danger their use entails. In Colombia it is defined by Decreto 4725 de 2005 (Decree 4725 of 2005), and it drives the level of health control INVIMA requires: the higher the class, the more rigorous the procedure. Getting the class right is the first step of any registration and one of the steps that trips companies up most.

What is risk classification and why does it matter?

To classify a medical device is to place it in the risk class that fits it before starting the procedure with INVIMA. That class drives how demanding the registration is, from the requirements to the assessment INVIMA applies. A class I is approved with general controls; a class III goes through a much more rigorous regime.

That is why a wrong classification is one of the most common and costly mistakes. Classifying a device below its real risk can lead INVIMA to reject the application; classifying it above can add unnecessary months and documents to the procedure. Either way, the product launch is delayed.

What criteria determine the risk class?

A device’s class is determined by its function and the risk it entails, not by its brand name. Decreto 4725 de 2005 sets the classification rules based on factors such as:

• The use intended by the manufacturer, that is, what the device is meant for.
• The degree of invasiveness and the type of contact with the body (surface, invasive or implantable).
• The duration of that contact (transient, short-term or prolonged).
• Whether the device is active, that is, whether it depends on a source of energy to work.

The combination of those factors determines which of the four classes the device falls into. The same type of product can land in different classes depending on its use and its level of invasiveness, so classification is analyzed case by case.

The four classes of medical devices

Class I: low risk

Low-risk devices, subject to general controls. They are simple-to-use products with external or low-impact contact. Typical examples: gauze and stretchers. Even though they are low-risk, they require a sanitary registration to be marketed.

Class IIA: moderate risk

The risk rises to moderate and, with it, the controls, which become special. These are devices with more direct or prolonged contact with the patient. Examples: catheters and suction equipment.

Class IIB: high risk

High-risk devices, subject to reinforced special controls. Their failure can have serious consequences for the patient. Examples: blood bags and ventilators.

Class III: very high risk

Class III is where the very high risk sits: devices that sustain or maintain life, or that are implanted in the body, subject to the most rigorous control regime. Examples: implants and pacemakers.

Classification summary table

Class	Risk level	Health control	Examples
Class I	Low	General controls	Gauze, stretchers
Class IIA	Moderate	Special controls	Catheters, suction equipment
Class IIB	High	Reinforced special controls	Blood bags, ventilators
Class III	Very high	Rigorous control regime	Implants, pacemakers

The class determines the rigor of the procedure, not the validity

A point that often confuses: the risk class defines how demanding the procedure is, but not how long the registration lasts. A medical device’s sanitary registration is valid for 10 years for all classes (Decreto 4725 de 2005), and its renewal must be requested at least 3 months before expiration. For the detail of the procedure, the documents and the timelines, see our complete guide to INVIMA sanitary registration.

Common mistakes when classifying a device

The most common slip-ups are classifying the device below its real risk, assuming that a similar product on the market already defines the class, or confusing controlled-technology biomedical equipment (which requires a marketing permit, not a sanitary registration) with an ordinary medical device. Each of these mistakes can send the procedure back to square one. Classification is, for that reason, the technical decision worth getting right from the start, with the support of the regulatory framework and not of informal comparisons.

How SPI Américas supports you with medical device classification

Correct classification is the starting point of every medical device procedure, and based on the experience of SPI Américas’ regulatory team, it is the step where companies go wrong most often. The regulatory affairs team at SPI Américas supports manufacturers and importers in defining the risk class, preparing the sanitary registration or the marketing permit as applicable, and renewing current authorizations. If you need to classify, register or renew a medical device in Colombia, write to us at [email protected].

Official sources cited

Decreto 4725 de 2005 (classification and registration of medical devices), invima.gov.co, normograma.invima.gov.co.