CONBIOÉTICA: Registering a CEI in Mexico

CONBIOÉTICA — the Comisión Nacional de Bioética, a decentralised body of Mexico’s Secretaría de Salud — operates the national registry of health-research ethics committees. If your institution intends to conduct health research on human subjects in Mexico, or if you are a sponsor placing a study at a Mexican site, the registered status of that site’s committees is a gating condition, and it is a different gating condition from the protocol authorisation issued by COFEPRIS.

Conflating the two is the single most common mistake in this pathway. Committee registration is a standing, institution-level credential that exists before any particular study does. Protocol authorisation is a per-study administrative act. A site with a valid committee registration and no authorised protocol cannot enrol; a site with neither cannot even assemble a submittable dossier, because the registration paperwork is itself an attachment to the protocol authorisation request. This guide covers the registration layer. For the per-protocol layer, see COFEPRIS clinical trial authorization.

The instrument that actually governs this: NOM-012-SSA3-2012

The operative rule is Norma Oficial Mexicana NOM-012-SSA3-2012, Que establece los criterios para la ejecución de proyectos de investigación para la salud en seres humanos. It was signed on 26 November 2012 by the Subsecretario de Integración y Desarrollo del Sector Salud, and its own Vigencia clause states that it “entrará en vigor a los 60 días naturales, contados a partir de la fecha de su publicación en el Diario Oficial de la Federación” — sixty calendar days after DOF publication, not on signature.

Two features of the norm matter for anyone assessing a Mexican site:

It is mandatory, not advisory. Clause 2 (Campo de aplicación) makes it “de observancia obligatoria, para todo profesional de la salud, institución o establecimiento para la atención médica de los sectores público, social y privado” that carries out health research on human subjects. Private-sector sites and independent clinics are inside its scope, not outside it.
Committees are the subject of an entire numbered section. Section 9, “De la constitución, inscripción y funcionamiento de los Comités de Investigación, Ética en la Investigación y Bioseguridad”, is the clause set a Mexican institution is actually assessed against. Its sub-clauses are cited throughout this guide, because “per NOM-012 clause 9.1.4” is a materially more useful instruction to a site than “per Mexican regulation”.

The norm sits under the Ley General de Salud (its own foundation clause cites, among others, LGS articles 45, 48, 78, 79, 81, 96, 98, 99, 100, 101, 102 and 103) and the Reglamento de la Ley General de Salud en Materia de Investigación para la Salud (articles 3, 4, 5, 22, 62, 78, 108, 115, 116 and 119). The specific hook for ethics-committee criteria is LGS article 41 Bis, which NOM-012 defers to twice — at clause 9.1.1 for CEI composition and at clause 9.2.1 for constitution and operation generally.

Mexico requires three research committees, not one — and there is no “CIS”

A recurring error in sponsor-side documentation is to treat Mexico as having a research ethics committee plus a single second body sometimes abbreviated “CIS”. NOM-012 does not describe such a body. Section 9 names three distinct committees, and a fourth exists under a separate provision:

Comité de Ética en Investigación (CEI)

The research ethics committee proper — the functional equivalent of an IRB or a REC. Under clause 9.2.8 the CEI “debe evaluar al inicio y periódicamente” whether protocols comply with ethical principles and applicable regulation, and has the power to approve or refuse protocols that will subsequently be submitted for the Secretaría’s authorisation. Under clause 9.2.9 it is specifically the body responsible for reviewing and approving the informed consent form drafted by the principal investigator. Under clause 9.2.10 it must propose suspension or cancellation of a study to the institution’s head where an adverse event constitutes an ethical or technical impediment to continuing.

Note what clause 9.2.8 implies about sequencing: the CEI’s approval is an input to the Secretaría’s authorisation, not a parallel track. This is the structural reason Mexican review cannot be run concurrently with COFEPRIS review the way some jurisdictions permit.

Comité de Investigación

A scientific-review body, distinct from the CEI. Its job is methodological and scientific merit rather than ethics. Clause 9.2.12 gives all three committees the attribution of issuing “la opinión técnica en materia de investigación, ética y bioseguridad en su ámbito de competencia” — each within its own competence, which is why a single combined committee does not satisfy the requirement.

Comité de Bioseguridad

The biosafety committee — comparable in function to an Institutional Biosafety Committee (IBC). Under clause 9.2.11 it must verify, for each study carrying toxic, infectious or radiological risk, that the requirements for conducting it are met, “incluyendo que exista una persona encargada de la seguridad radiológica, la cual deberá estar registrada ante la Comisión Nacional de Seguridad Nuclear y Salvaguardias”. That last requirement is easy to miss on a study using ionising radiation: the radiation safety officer carries a separate registration with a separate authority (CNSNS), and the biosafety committee is expected to have confirmed it.

Comité Hospitalario de Bioética (CHB) — related, but not a research committee

The hospital bioethics committee established under LGS article 41 Bis addresses clinical-care ethics — treatment dilemmas, end-of-life decisions, institutional ethics consultation — rather than research protocol review. It is registered with CONBIOÉTICA as well, which is why the two registries are frequently confused. A CHB registration is not a substitute for a CEI registration, and a sponsor auditing a site should confirm which certificate it has actually been shown.

Who registers the committees, and with whom

The obligation is placed on the institution, not on the committee and not on the investigator. Clause 9.1.4 is explicit: “El titular de la institución o establecimiento deberá registrar los Comités de Investigación, Ética en la Investigación y Bioseguridad, según corresponda, ante la Secretaría, informar acerca de la modificación, designación o sustitución de alguno de sus miembros y entregar un informe anual de sus actividades.”

Three separate standing duties are packed into that one sentence, and sites routinely discharge only the first:

Register the committees with the Secretaría de Salud — in practice, through CONBIOÉTICA, which administers the registry and issues the criteria the committees are assessed against.
Notify changes in membership — modification, designation or substitution of any member. This is a continuing obligation, not a renewal-time reconciliation. A committee whose chair left eighteen months ago and never notified is out of compliance with 9.1.4 even if its certificate has not yet expired.
File an annual activity report. The norm is unusually specific about timing: clause 4.8 defines the informe anual as the document the three committees must submit to the Secretaría de Salud “durante los primeros 10 días hábiles del mes de junio de cada año” — the first ten business days of June, every year, covering the committees’ composition and their protocol-evaluation activity.

The phrase “según corresponda” in 9.1.4 does real work: an institution registers the committees that apply to what it actually does. A site conducting only observational, non-interventional health research with no biological or radiological hazard is not thereby required to stand up a biosafety committee — but if it later takes on a study using ionising radiation or genetic engineering techniques, it will need one, and it will need it registered before the protocol dossier is assembled (see the COFEPRIS section below).

Composition requirements your registration will be assessed against

NOM-012 sets composition rules directly for the Comité de Investigación and the Comité de Bioseguridad, and defers to LGS article 41 Bis criteria for the CEI.

Multidisciplinary by construction. Clause 9.1.1 requires the Comités de Investigación and Bioseguridad to be constituted “multidisciplinaria, con profesionales de la salud de distintas especialidades relevantes para los temas sobre los que se investiga en la institución”, and to include professionals from other disciplines, users, and members of civil society “que representen los valores morales, culturales y sociales de los sujetos de investigación”. Those lay members may come from the institution itself or from other medical institutions.
Numeric floor and ceiling. Clause 9.1.2: at minimum three scientists, plus as many civil-society representatives as are considered necessary, “contando en total con al menos 6 integrantes y con máximo 20”. Six is the floor; twenty is a hard ceiling, which is a constraint large academic centres sometimes trip over when they try to seat every department.
At least four vocales. Clause 9.2.6 requires the Comités de Investigación and Bioseguridad to have at least four vocales representing each of the areas relevant to the protocol under review, which may include medical, nursing and administrative staff of the institution as well as members from other sectors.
A named president and an empowered secretary. Clause 9.2.4 requires each committee to designate a president, who is answerable to the head of the institution for the committee’s activities. Clause 9.2.5 requires the secretary to be granted actual administrative powers (“facultades de gestión administrativa”) to carry out the committee’s business — a governance detail that distinguishes a real committee from a paper one.
Terms fixed in the acta de instalación. Clause 9.2.2: members serve for the period established in the committee’s installation minutes, may be ratified at the end of each period, and where substituted should be replaced on a staggered basis, with documentary evidence retained. Operations must be described in written Reglas de Funcionamiento.
Recusal is mandatory. Clause 9.2.3: members “deberán abstenerse de participar en la evaluación y dictamen de sus propias investigaciones”. See also conflict of interest in human subjects research.
External participants have voice but no vote. Clause 9.2.7 permits members of external committees and external advisers to take part in sessions “los cuales tendrán voz pero no voto”, and permits the institution’s own investigators to attend on the same basis.

One provision is genuinely useful to smaller sites and is widely overlooked. Clause 9.1.3: where it is not possible to constitute a Comité de Investigación or a Comité de Bioseguridad with the institution’s own staff, the head of the institution “podrá solicitar el apoyo de otros Comités constituidos en el nivel inmediato superior de su propia institución o en instituciones o establecimientos de salud externos”. This is Mexico’s equivalent of an external or reliance arrangement — see, for comparison, central IRB / single IRB models. Note carefully that the norm extends this relief to the Comité de Investigación and the Comité de Bioseguridad. It does not, on its face, extend it to the CEI.

How committee registration feeds the COFEPRIS protocol dossier

This is where the two layers meet, and where the practical consequence of an unregistered or lapsed committee shows up. NOM-012 section 6 governs the protocol authorisation request. Note that the norm’s own wording addresses “la Secretaría” — the Secretaría de Salud — throughout; COFEPRIS is the decentralised body within that Secretaría that in practice receives and rules on the authorisation, which is why the two names attach to the same act. Two of section 6’s sub-clauses are pure committee dependencies:

Clause 6.3.2.5 requires the dossier to include a “copia simple del formato de inscripción de los Comités de Investigación, Ética en la Investigación y en su caso, de Bioseguridad, con acuse de recibo de la Secretaría” — a plain copy of the committees’ registration filing, bearing the Secretaría’s acknowledgement of receipt. If the registration was never filed, there is nothing to attach.
Clause 6.3.2.8 requires a favourable dictamen from both the Comité de Investigación and the Comité de Ética en la Investigación at the institution where the research will be conducted — and adds that where the study involves ionising radiation or genetic engineering techniques, a favourable dictamen from the Comité de Bioseguridad is required as well.

Read together, these mean the registration layer is strictly upstream of the authorisation layer. A sponsor’s feasibility questionnaire should therefore ask a Mexican site for its committee registration evidence, not merely whether it “has an ethics committee”. The correct question is whether the institution’s head has filed the inscripción and holds the Secretaría’s acuse de recibo — because that document, not the committee’s existence, is what the protocol dossier consumes.

The follow-on obligations run through the committees too. Under clause 7.4.2 the principal investigator must give a copy of each partial and final technical report to the heads of the Comités de Investigación, Ética en la Investigación and, where applicable, Bioseguridad. Under clause 8.9 the investigator must inform the CEI of every probable or directly related adverse event, and must report to it, at the periodicity the committee sets, on the absence of adverse events in protocols under their responsibility. Under clause 8.8 the institution’s head, any of the three committees, or the principal investigator must order immediate suspension or cancellation on any severe adverse event that constitutes an ethical or technical impediment — and resuming the study then requires a fresh authorisation, not a reinstatement.

Validity, renewal, and what we could not verify

NOM-012 itself does not state a registration validity period. It states the duty to register (9.1.4), the duty to notify membership changes (9.1.4) and the annual-report deadline (4.8), but the vigencia of the registration certificate is set by CONBIOÉTICA’s own procedural guidance rather than by the norm.

The NIAID-operated ClinRegs regulatory reference, citing CONBIOÉTICA’s registration and renewal guidance, reports the following. Treat these as reported figures and confirm them against CONBIOÉTICA directly before relying on them for a submission timetable:

Registration is reported as valid for three years.
Renewal applications are reported as due within 45 working days prior to expiration.
CONBIOÉTICA is reported to have 10 working days from the business day following receipt to accept the application or request corrections, and 30 working days to notify the applicant and issue the corresponding registration certificate.

We were not able to verify the following against a primary source and are not going to guess at them: whether any fee attaches to the registration or its renewal; the current, definitive list of documents CONBIOÉTICA requires with an application; and the format of the registration number it issues. CONBIOÉTICA’s portal at gob.mx/salud/conbioetica and the Catálogo Nacional de Regulaciones, Trámites y Servicios entry for the corresponding trámite are the authoritative sources for all three, and both should be checked at the time of filing — procedural requirements for this registry have changed more than once. Both resources returned a bot-challenge or 403 to automated retrieval at the time of writing, which is a retrieval limitation on our side, not a statement about their availability to a human user.

What we can say with confidence, from the norm itself, is that a registration is not a fire-and-forget credential: 9.1.4’s membership-notification duty and 4.8’s June annual-report deadline both run continuously between renewals, and a committee that has met neither is materially non-compliant regardless of how much time is left on its certificate.

A practical checklist

If you are a Mexican institution standing up committees

Determine which of the three committees apply “según corresponda” to the research you actually conduct — and revisit that determination whenever your portfolio takes on radiological, infectious, toxic or genetic-engineering risk.
Constitute each committee multidisciplinarily with at least six and no more than twenty members, including at least three scientists and civil-society representation (9.1.1, 9.1.2).
Seat at least four vocales on the Comité de Investigación and Comité de Bioseguridad (9.2.6); designate a president answerable to the institution’s head (9.2.4) and a secretary with real administrative powers (9.2.5).
Record the acta de instalación with each member’s term, and issue written Reglas de Funcionamiento (9.2.2). Build the recusal rule of 9.2.3 into them explicitly.
Where you genuinely cannot staff a Comité de Investigación or Bioseguridad internally, use the 9.1.3 route — request support from a committee at the next level up within your own institution, or from an external health institution — and document the arrangement.
File the inscripción with the Secretaría through CONBIOÉTICA and retain the acuse de recibo: clause 6.3.2.5 makes that acknowledgement an attachment to every future protocol dossier.
Diarise two recurring obligations: notify any membership change as it happens, and file the informe anual within the first ten business days of June (4.8).

If you are an international sponsor placing a study in Mexico

Ask for the committee registration filing and the Secretaría’s acuse de recibo, not a self-assertion that the site “has an IRB”. Confirm which committees the evidence covers.
Confirm the certificate is a CEI registration and not a Comité Hospitalario de Bioética registration — different body, different function.
Check whether your protocol triggers the Comité de Bioseguridad dependency in 6.3.2.8 (ionising radiation or genetic engineering techniques). If it does, the biosafety committee’s favourable dictamen is a dossier component, and its registration must already exist.
Build your timeline sequentially. Clause 9.2.8 places CEI approval upstream of the Secretaría’s authorisation; do not plan on parallel review.
Where your protocol uses ionising radiation, confirm the site’s radiation safety officer is registered with the CNSNS — clause 9.2.11 makes that the biosafety committee’s business, and an unregistered officer is a finding waiting to happen.
Align your safety-reporting plan with clause 8.9’s requirement that the investigator report to the CEI both adverse events and their periodic absence — a positive-confirmation obligation many global SOPs do not contain by default.

How Mexico’s model compares

Mexico’s design — a national registry of institutional committees, plus a separate national regulator authorising each protocol — is the dominant pattern across Latin America, but the details diverge in ways that matter to a multi-country study.

Brazil runs its committee and protocol review through a single national submission platform with a two-tier committee structure; see Plataforma Brasil: the CEP/CONEP ethics submission system.
Colombia and Argentina place more of the decision weight on the national regulator; see INVIMA Colombia and ANMAT Argentina.
Peru couples institutional ethics review to a binding safety opinion from a second authority; see Peru INS/OGITT and DIGEMID.
Spain, whose terminology Mexican documentation sometimes borrows, uses a national ethics committee with a distinct mandate from the accredited review committees; see Spain’s CEEI and Catalonia’s CIR-Cat.

Across all of them, the same discipline applies: identify which layer a given approval belongs to before you put a date on it. This page sits in CASRAI’s integrity and compliance cluster alongside the rest of that human-subjects-protection material.

Frequently asked questions

What is CONBIOÉTICA?

CONBIOÉTICA is Mexico’s Comisión Nacional de Bioética, a decentralised body of the Secretaría de Salud. Among other functions it administers the national registry of health-research ethics committees (CEI) and hospital bioethics committees (CHB), and issues the criteria those committees are assessed against. NOM-012-SSA3-2012’s introduction requires researchers, once mandatory legal requirements are met, to conform to internationally accepted scientific and ethical principles “y a los criterios que en la materia emita la Comisión Nacional de Bioética”.

Is CONBIOÉTICA registration the same as COFEPRIS approval?

No, and they are not substitutes. CONBIOÉTICA registration is a standing, institution-level registration of the committees themselves. COFEPRIS authorisation is a per-protocol administrative act permitting a specific study. NOM-012 clause 6.3.2.5 makes the committee registration filing an attachment to the protocol authorisation request, which is the clearest statement of the dependency: registration first, then authorisation.

How many committees does a Mexican research site need?

Up to three under NOM-012 section 9 — Comité de Investigación, Comité de Ética en la Investigación, and Comité de Bioseguridad — registered “según corresponda”, meaning as applicable to the research the institution actually conducts. A Comité Hospitalario de Bioética under LGS article 41 Bis is a separate, clinical-care body and is not a research review committee.

What is a “CIS” committee in Mexico?

NOM-012-SSA3-2012 does not use that abbreviation. Sponsor-side documents that refer to a Mexican “CIS” are usually collapsing two genuinely separate bodies — the Comité de Investigación (scientific review) and the Comité de Bioseguridad (biosafety) — into one. They have distinct competences under clauses 9.2.11 and 9.2.12 and are registered as distinct committees.

How many members must a Mexican research committee have?

For the Comité de Investigación and Comité de Bioseguridad, NOM-012 clause 9.1.2 sets a minimum of three scientists plus the necessary civil-society representatives, “contando en total con al menos 6 integrantes y con máximo 20” — at least six and at most twenty in total. CEI composition follows the criteria issued under LGS article 41 Bis rather than a number stated in the norm.

How long is a CONBIOÉTICA committee registration valid?

NOM-012 does not state a validity period; it is set by CONBIOÉTICA’s procedural guidance. The NIAID ClinRegs reference reports a three-year validity with renewal applications due within 45 working days of expiry. We have not verified that figure against CONBIOÉTICA’s own published guidance and recommend confirming it directly at gob.mx/salud/conbioetica before relying on it. What NOM-012 does fix is the annual reporting duty: the committees’ informe anual is due in the first ten business days of June each year (clause 4.8).

Can a Mexican site use another institution’s committee?

Clause 9.1.3 permits it for the Comité de Investigación and the Comité de Bioseguridad specifically: where the institution cannot constitute one with its own staff, its head may request support from a committee at the next level up within its own institution or from an external health institution or establishment. The norm does not extend that provision to the Comité de Ética en la Investigación.

Does a study need biosafety committee sign-off?

Only where triggered. NOM-012 clause 6.3.2.8 requires the Comité de Bioseguridad’s favourable dictamen in addition to those of the Comité de Investigación and CEI where the study involves ionising radiation or genetic engineering techniques. Clause 9.2.11 additionally makes the biosafety committee responsible for verifying that studies with toxic, infectious or radiological risk meet the requirements for their conduct, including that a radiation safety officer registered with the Comisión Nacional de Seguridad Nuclear y Salvaguardias is in place.

What must a Mexican committee report, and when?

Clause 9.1.4 places three continuing duties on the head of the institution: register the committees, notify any modification, designation or substitution of members, and deliver an annual activity report. Clause 4.8 fixes the annual report’s window at the first ten business days of June each year, covering committee composition and protocol-evaluation activity.