ANVISA Normative Instruction 426/2026 defines how UDI data must be transmitted and managed in Brazil’s SIUD database under RDC 591/2021. It establishes initial transmission rules, correction timelines, third-party authorization, and discontinuation procedures. Normative Instruction 426/2026 goes into effect March 1, 2026.
Brazil’s Agência Nacional de Vigilância Sanitária (ANVISA) published Normative Instruction No. 426 of February 13, 2026, establishing requirements for the transmission and management of the Unique Identification of Medical Devices (UDI) database in compliance with RDC No. 591/2021.
The regulation was published in the Official Gazette of the Union on February 18, 2026 (Edition 32, Section 1, Page 209) and enters into force on March 1, 2026.
The Instruction operationalizes Brazil’s UDI System by defining how data must be transmitted, corrected, maintained, and governed within the national database.
Normative Instruction 426/2026 was adopted by ANVISA’s Collegiate Board under:
It applies to all medical devices subject to RDC 591/2021 or any regulation that may replace it.
1. Creation and Governance of SIUD
The regulation formally defines the Unique Device Identification System (SIUD) as Brazil’s electronic UDI database.
Key definitions include:
2. Initial UDI Data Transmission Requirements
Before a medical device is made available in Brazil:
However, companies must maintain the UDI-PI component in their Quality Management System in accordance with RDC No. 665/2022 to ensure full traceability.
Each UDI dataset must correspond to one single UDI-DI per device model.
3. Transmission Methods
UDI data may be transmitted:
Companies opting for bulk transmission must implement appropriate technical solutions in accordance with ANVISA’s implementation guide.
Only the registration holder — or an authorized third party — may transmit UDI data.
4. Publication and Corrections
If a change requires issuance of a new UDI-DI, replacement must occur within 30 calendar days from publication of the change in the Official Gazette.
The publication date cannot be modified once reached.
5. Ownership Transfers and Discontinuation
In cases of transfer of sanitary regularization ownership:
For discontinuation or cancellation:
The registration holder must inactivate the UDI-DI in SIUD within 30 days if:
Failure to comply constitutes a sanitary infraction under Law No. 6,437/1977.
6. Third-Party User Authorization
Registration holders may authorize third-party users within SIUD to transmit UDI data.
However:
According to Article 11, compulsory UDI transmission deadlines follow the risk-class schedule established in Article 15 of RDC No. 591/2021:
Until the applicable mandatory deadline is reached, companies may submit UDI data voluntarily.
Additionally:
Normative Instruction 426/2026 transforms Brazil’s UDI framework from a legal obligation into an operational digital compliance system.
By formalizing transmission rules, correction timelines, governance procedures, and enforcement mechanisms, ANVISA strengthens:
Medical device companies operating in Brazil must now ensure not only UDI labeling compliance but also continuous database governance within SIUD.
For full regulatory text, consult:
Learn more about:
Browse our news hub featuring company announcements, regulatory updates, and industry insights to keep you informed and ahead of the curve.
Whether looking for more information or ready to partner with us, we're here to guide you through every step of the regulatory process.
Contact us