Instituto Nacional de Vigilancia de Medicamentos y Alimentos

INVIMA, officially known as the Instituto Nacional de Vigilancia de Medicamentos y Alimentos, is Colombia’s national authority responsible for the regulation, surveillance and control of pharmaceuticals, medical devices, foods, beverages, cosmetics and related products. Its core functions include the evaluation and authorization of market entry for these goods, the monitoring of manufacturing and distribution practices, the conduct of laboratory testing and the enforcement of compliance with national technical standards. By overseeing the entire lifecycle of regulated products, INVIMA aims to protect public health through the assurance of safety, efficacy and quality for both domestic consumers and international trade partners. The institute serves a broad spectrum of stakeholders that includes local producers, importers, exporters, health professionals, regulatory bodies and the general public.

As a specialized regulatory agency, INVIMA distinguishes itself through its technical expertise in risk assessment, inspection methodologies and post‑market surveillance, which are applied consistently across the food and drug sectors. It acts as the national reference laboratory for many analytical procedures and participates in regional and international harmonization initiatives, aligning Colombian standards with those of organizations such as the WHO, PAHO and the ICH. This positioning enables INVIMA to serve as a gatekeeper for market access, ensuring that only products meeting rigorous safety and performance criteria can be circulated within Colombia and exported abroad. The agency’s notable competencies also encompass the issuance of certifications required for export, the management of alerts and recalls, and the provision of scientific advice to policymakers.

INVIMA operates as a public institution under the Ministry of Health and Social Protection of the Colombian government, receiving its mandate and funding directly from the state. It does not have a private parent company or subsidiaries, and its organizational structure reflects its status as a central governmental body tasked with nationwide regulatory oversight. The institute’s operational continuity has been tested by cyber incidents, notably a February 2022 attack that disrupted its online services and an October 2022 attack that further impaired its technological platform, highlighting the challenges faced by public agencies in maintaining resilient digital infrastructure while fulfilling critical public health responsibilities.