Regulatory launch — merch and kits for products under regulation

When to use this playbook

This playbook applies when your company is bringing a regulated product to the Mexican market and needs merch, press kits, samples, POP material or sales-force pieces. Typical industries include: pharmaceuticals (Cofepris, NOM-073, NOM-251), supplements and foods (COFEPRIS, PROFECO, NOM-051 on front labelling), cosmetics (Cofepris, NOM-141), medical devices (Cofepris), fintech (CNBV, Banxico, Fintech Law), crypto assets (Banxico, CNBV, UIF), cannabis and derivatives (Cofepris, COFEPRIS Cannabis), alcohol (Health Secretariat, specific RFC for beverages), tobacco (COFEPRIS, General Tobacco Control Law), electric power and fuels (CRE, ASEA, CNH) and telecommunications (IFT).

It also applies for launches in partially regulated but sensitive sectors: sexual health, mental health, gambling and betting (SEGOB, Games and Draws Directorate), retail investment products (CNBV, AMIB), electric vehicles (SEMARNAT, Profeco), real estate (Profeco, CONDUSEF), financial products with a fiscal component (SAT). In all these cases the merch has to avoid prohibited claims, cannot suggest unapproved medical benefits, cannot include images of minors in restricted products, and has to respect the right to be forgotten and personal data protection (LFPDPPP).

It works equally for launches crossing the border from the United States, Europe or Asia into Mexico, where the main product carries FDA, EMA, CE or equivalent approval and needs local regulatory adjustment. The merch has to reflect the locally approved claim, not the claim from the source market, because Cofepris or Profeco can sanction for misleading advertising even if the piece is only a press kit.

It is not a playbook for unregulated products — that case is covered by the trade show, corporate launch or commercial event playbook. Nor for a rebrand without a product change: that case is the rebranding playbook. This one is about a new or reformulated product that enters the market under a specific regulatory framework.

What problem it solves

The most expensive problem in a regulated launch is the post-launch sanction. Cofepris, Profeco, CONDUSEF or the sector regulator can issue a fine, suspend the sanitary registration or open a misleading-advertising proceeding if the merch includes unapproved claims. A shirt with “the only one that cures X” when Cofepris only approved “contributes to digestive health” is enough to open a file. The playbook prevents those errors from the design phase.

The second problem is the label and mandatory information. NOM-051 requires front labelling with black octagons for warning seals on non-alcoholic food and beverages. If the merch includes derived products from the main product (samples, miniatures, tasting kits), those derivatives also have to comply with NOM. The playbook identifies which pieces require a label and which pieces are only promotional.

The third problem is data protection. Under LFPDPPP, a sample delivered at an event can imply data capture from the recipient (name, email, RFC). If Corp-Merch or the client do not have a visible privacy notice and recipient consent, the delivery can create liabilities. The playbook structures the privacy notice, the legend on the kit and the consent mechanism where applicable.

The fourth problem is fiscal traceability. Regulated products sometimes require CFDI 4.0 with SAT-specific keys: product key, unit key, foreign trade complement when crossing the border. If the merch is invoiced with generic keys, the client fiscal area cannot reconcile it and the SAT can observe it in an audit. The playbook ensures correct key usage from the purchase order.

Roles and responsibilities

On the client side, the brand or regulated-unit director is the launch sponsor. The regulatory owner validates every claim, every label, every mandatory legend and signs the final approval before production. The marketing area translates the approved claims into merch messages without adding free text. The fiscal area uses the correct product and unit keys on every CFDI 4.0. The legal area reviews the privacy notice and LFPDPPP compliance. The sales-force responsible trains the team on what to say and what not to say when delivering the merch.

Corp-Merch provides a project manager with regulatory experience who coordinates certified providers and the segregated production line where applicable. A regulation-trained designer works with the approved claims and knows the limits per sector. A regulatory quality owner signs the per-batch log and retains witness samples. A fiscal coordinator validates CFDI 4.0 with the correct product keys. A normative packaging owner checks labels, legends and privacy notices before dispatch.

The key client decision is whether the launch will use the locally approved claim or try to import the claim from another market. The answer is almost always the former: regulatory fines far exceed the cost of adapting the message. If the client insists on using the foreign claim, Corp-Merch documents the risk in writing and demands a conformity signature before producing.

KPIs to track

• Regulatory compliance: zero observations from Profeco, Cofepris or the sector regulator during the first thirty days (target: 0).
• Correct labelling: percentage of pieces with the NOM-051 front label where applicable, allergen legend and privacy notice (target: 100%).
• Correct CFDI 4.0: percentage of invoices with sector-specific product and unit keys (target: 100%).
• Signed traceability: percentage of batches with a log signed by the regulatory owner (target: 100%).
• Time to launch: days between regulatory brief and kit delivery to the sales force (target: within the approved timeline).