Cannabis Adverse Reaction Reporting for Exporting LPs (2026)

Two definitions in section 248 do most of the work. An adverse reaction is a noxious and unintended response to cannabis or to a cannabis accessory containing cannabis. A serious adverse reaction is one that requires inpatient hospitalization or prolongs an existing one, causes congenital malformation, results in persistent or significant disability or incapacity, is life-threatening, or results in death. Health Canada also treats medically important reactions as serious in its guidance, which widens the practical test beyond the five statutory triggers.

Section 248.1 then sets two obligations on a holder of a licence that sells or distributes a cannabis product. File a detailed report with the Minister within 15 days of becoming aware of a serious adverse reaction, containing all the information in your possession about that individual's use of the product. And prepare an annual summary report with a concise, critical analysis of every adverse reaction you became aware of in the previous twelve months, whether serious or not. Reports go to the Canada Vigilance Program, and the CIOMS form is accepted.

The annual summary is the part that surprises people. It is prepared and held, not routinely submitted, and Health Canada's guidance allows 70 days after the reporting period because the Canada Vigilance database updates monthly and holders are expected to reconcile their own records against it. A summary that says no reports were received still has to exist.

The clock starts on awareness, not on conclusion

Fifteen days runs from the moment someone at your company becomes aware, not from the day your investigation closes or causality is settled. You do not need to believe the product caused anything to owe a report. Health Canada's guidance also expects licence holders to screen scientific literature for published case reports involving their own product, including cases published outside Canada.

Scale matters here for calibration. Health Canada's Office of Cannabis Science and Surveillance published an analysis in the Journal of Cannabis Research in August 2025. It counted 698 unique adverse reaction cases involving legal cannabis products between 2018 and 2024, 62.3 percent of them classified as serious. Most were submitted by licence holders acting on this obligation. Across six years and a national market, that is a small number of files. Which is exactly why an inspector remembers the LP that could not produce one.

Read section 248.1 again and the phrase that decides your exposure is cannabis product. The Regulations define it as cannabis of one of the classes in Schedule 4 to the Cannabis Act, or an accessory containing it, after it has been packaged and labelled for sale to a consumer at the retail level. Bulk flower released to a European site for testing, packaging and Qualified Person release is not that. It is cannabis, and it is exported under an export permit, but it has not been packaged and labelled for a Canadian consumer.

So the honest position for most exporting LPs is this. Where you sell packaged product to registered clients in Canada, section 248.1 applies squarely. Where you ship bulk material that is repackaged and released abroad, the Canadian duty does not obviously attach to the medicine a foreign patient eventually receives. That obligation sits with whoever places it on the destination market. Do not read that as freedom. Read it as a transfer.

Who carries the duty in each market

In Germany, the company that places the medicine on the market appoints a graduated plan officer, notifies that person to BfArM and the competent state authority, and runs the pharmacovigilance system behind it. That is your importer, not you. In Australia, the TGA expects sponsors of unapproved goods to monitor and record product safety continuously, hold adverse events in a safety database, issue treatment protocols that require prescribers to report, and file six-monthly reports on supply under the Special Access Scheme and Authorised Prescriber pathways. The TGA has told prescribers to report adverse events within 15 calendar days of becoming aware. In the United Kingdom, the MHRA Yellow Card scheme covers unlicensed medicines, and the agency's guidance on supplying specials lists adverse reaction reporting in the supply chain checklist your buyer works from.

Three regulators, three reporting routes, one common feature. Every one of them needs a batch number, a manufacturing site and a supplier who answers the phone. That supplier is you, which is why the duty you do not technically hold still shows up in your inbox.

This is the practical mechanism, and it is contractual rather than statutory. An importer that has to satisfy its own national authority will write the pieces it needs from you into the quality agreement, alongside the deviation and recall clauses. We set out the wider document in our guide to cannabis quality agreements between Canadian LPs and EU importers. Four elements recur often enough to be worth preparing before the draft arrives. Call it the 4-part vigilance clause.

1. Intake and notification. A named contact on each side, a channel that is monitored outside business hours, and a window for passing a case on. Importers commonly propose 24 hours for anything fatal or life-threatening and 48 to 72 hours for other serious cases. Agree only what your quality system can meet at 3 a.m. in Montreal when Berlin is at 9 a.m.
2. The information set. What travels with a case: batch or lot number, cultivar, date of release, the certificate of analysis for that lot, deviations open against it, and the storage and shipping record. No clinical assessment from you, because that is not your role and not your competence.
3. Reconciliation. A periodic exchange so both sides hold the same case list, usually annually to feed the importer's Product Quality Review. Literature screening sits here too, since your Canadian obligation to screen published case reports and your importer's equivalent duty can surface the same paper.
4. The defect and recall interface. A reaction report and a quality defect often start from the same phone call. The clause should say when a vigilance case escalates into your recall procedure and who decides.

None of that is exotic pharmaceutical machinery. It is a mailbox, a form, a retention rule and a named person. A Canadian LP that cannot name the person who takes a 6 p.m. call about a batch in a German pharmacy should not be signing a German supply agreement yet. That is a staffing decision, not a paperwork one, and importers work it out during the audit whether or not you raise it.

Note what the clause does not do. It cannot transfer your importer's statutory duty to you, and it cannot transfer yours to them. It allocates the work of feeding both systems. Signatories on the Canadian side are usually the quality assurance person named on the licence, which keeps the vigilance contact and the release authority in the same pair of hands.

Preparation here is measured in hours, not quarters, which is why the gap is embarrassing when an auditor finds it. Five steps, in this order.

1. Name a vigilance contact and a deputy, in writing, with an email alias that outlives whoever currently reads it.
2. Write the intake procedure. Where cases can arrive from: importer, distributor, pharmacy, sales inbox, literature. What gets recorded, who triages, and what triggers the 15-day clock.
3. Define the record. One case, one file, with the lot traceable back to a room and a harvest date through your batch traceability chain.
4. Set retention to 25 years and put the files somewhere that survives a system migration. Your data integrity controls apply to vigilance records exactly as they do to batch records.
5. Rehearse one case end to end. Take a real lot shipped eighteen months ago, invent a report against it, and see how long the file takes to assemble.

Where LPs actually get caught

Not on the deadline. The failures we see are upstream of it. A complaint arrives through the commercial inbox, gets logged as a quality complaint, and is closed on product grounds without anyone asking whether a reaction was described in it. Export cases sit outside the domestic complaint workflow entirely, because that workflow was built around registered Canadian clients. And the annual summary gets skipped in a year with no reports, on the reasonable-sounding theory that there is nothing to summarise.

The fix for all three is the same and it is dull: one intake point, one log, one annual review. Vigilance is the part of a quality system that costs almost nothing to run and a great deal to reconstruct.

AlphaLeaf is a Montreal-based Health Canada Licensed Producer of indoor-grown, hand-trimmed cannabis flower with refined genetics and lot-level traceability from room to shipping carton. We hold export authorisation under the Cannabis Act, test every lot through an ISO/IEC 17025 accredited laboratory, and keep the documentation that EU importers, Australian sponsors and their vigilance functions expect from a Canadian supply partner.

If you are drafting a vigilance clause with a Canadian supplier, or qualifying one for a regulated medical channel, talk to our quality team and we will walk you through ours. Ask who answers the phone. The answer tells you most of it.

Does a Canadian cannabis Licensed Producer have to report adverse reactions to Health Canada?

Yes, where it sells or distributes a cannabis product. Section 248.1 of the Cannabis Regulations requires a detailed report to the Minister within 15 days of becoming aware of a serious adverse reaction, plus an annual summary report analysing all adverse reactions from the previous twelve months. Both must be retained for at least 25 years.

What counts as a serious adverse reaction under the Cannabis Regulations?

Section 248 defines it as a noxious and unintended response that requires inpatient hospitalization or prolongs an existing hospitalization, causes congenital malformation, results in persistent or significant disability or incapacity, is life-threatening, or results in death. Health Canada's guidance also treats medically important reactions as serious even where none of those five apply.

Does the 15-day clock start when the investigation is finished?

No. It starts on the day someone at the licence holder becomes aware of the serious adverse reaction, whether or not causality has been assessed or the internal review has closed. Follow-up information is sent later as an update referencing the original report.

Do Canadian adverse reaction rules follow cannabis that is exported?

Section 248.1 attaches to a cannabis product, which the Regulations define as cannabis packaged and labelled for sale to a consumer at the retail level. Bulk flower exported for testing, packaging and release abroad does not meet that definition, so the reporting duty for the finished medicine generally sits with the party placing it on the destination market. The Canadian LP is still pulled in through the quality agreement.

Who reports an adverse reaction in Germany when the flower came from Canada?

The pharmaceutical entrepreneur placing the medicine on the German market. Under section 63a of the Arzneimittelgesetz that company appoints a graduated plan officer, notifies the appointment to BfArM and the competent state authority, and runs the pharmacovigilance system. The Canadian producer supplies batch information into that system rather than reporting directly.

What do international importers ask a Canadian LP for in a vigilance clause?

A named contact with out-of-hours cover, an agreed notification window for serious cases, a defined information set covering lot number, cultivar, certificate of analysis and open deviations, a periodic reconciliation of case lists, and a defined handover point where a case becomes a quality defect or a recall.