On February 9, 2026, the European Medicines Agency opened a public consultation on a concept paper to revise EU-GMP Annex 15, and change control is one of the areas it proposes to tighten. For Canadian Licensed Producers selling into EU medical channels, that tells you where auditors will spend their time next.
Cannabis change control is the documented process a Licensed Producer uses to propose, risk-assess, approve, implement and verify any planned change that could affect flower quality or reproducibility. Under EU-GMP, that reaches genetics, grow rooms, equipment, drying setpoints, packaging, testing labs and batch size. Each change needs a written record, a risk assessment, sign-off from the right people and proof that it worked.
Health Canada notifications and EU expectations run on separate tracks. Many avoidable audit findings start when an LP treats one as the other.
What cannabis change control means under EU-GMP
Section 11 of Annex 15 sets the baseline. It calls for written procedures covering planned changes to starting materials, components, processes, equipment, premises, methods and batch size. Any other lifecycle change that may affect quality or reproducibility is in scope too. Quality risk management then has to judge the impact of each change on product quality, documentation, validation, regulatory status, calibration and maintenance.
Approval comes from the responsible people named in your quality system, after they've reviewed the supporting data. The last requirement is the one LPs skip most often: after implementation, you evaluate whether the change actually worked.
The wider framework sits in ICH Q10, which names change management as one of four elements of a pharmaceutical quality system alongside CAPA, process monitoring and management review. ICH Q9(R1) governs how the risk assessment itself is done. If your SOP doesn't reference both, an EU auditor will ask why.
Why flower is harder to control than a tablet
A tablet formula doesn't change when you swap a light fixture. Cannabis does. Cannabinoid and terpene expression respond to light spectrum, canopy temperature, humidity, drying rate and cure time. A change that looks purely mechanical can move the numbers on your next certificate of analysis.
That's why a lighting retrofit belongs in the change log, not only in the facilities budget.
What the Annex 15 revision could add
The consultation closed on April 9, 2026. The concept paper proposes bringing active substance manufacturers fully into Annex 15's scope and strengthening expectations on change control, validation governance and oversight of validation work done by contractors. Depending on the destination market, dried medical cannabis flower may be handled as a finished medicinal product or as an active substance. Your importer's QP can tell you which reading applies to your supply. Plan for the stricter one.
Changes that trigger change control at a cannabis LP
The test is simple: could this change reach the COA, the stability data, the batch record or the validation status of a room or system? If yes, it needs a change record. The table below covers the changes that come up most often at an indoor cannabis site.
| Planned change | What can shift | Who signs off first |
|---|---|---|
| New cultivar or mother stock | Potency, terpene profile, specification | QA and importer QP |
| Lighting retrofit | Cannabinoid and terpene expression | QA and importer QP |
| HVAC, drying or curing setpoints | Moisture, water activity, terpene retention | QA and importer QP |
| Growing medium or nutrient supplier | Heavy metals, contaminant results | QA, importer per agreement |
| Trimming method | Bud structure, trichome integrity | QA, importer per agreement |
| Packaging material or supplier | Stability and shelf-life claims | QA and importer QP |
| Contract testing laboratory | Method comparability, COA values | QA and importer QP |
| Decontamination or irradiation step | Microbial results, market eligibility | QA and importer QP |
| Batch size | Homogeneity, sampling plan | QA and importer QP |
| Batch record or LIMS software | Audit trail, data integrity | QA, validation lead |
Lab changes cause more trouble than their paperwork suggests. Two ISO/IEC 17025-accredited labs can report different potency on the same batch. Sample preparation and method differences usually explain the gap, which is also why EU retests often return different COA numbers. Run a bridging comparison on retained samples before the new lab issues release results.
The changes that look too small to log
A replacement part of the same make and model is usually handled under maintenance. A different model is a change. So is a new sanitiser, a new bag supplier with an identical spec sheet, or an SOP revision that moves a hold time by a day. When in doubt, open the record and let QA close it as not applicable.
Your quality agreement with the EU importer decides which of these they must hear about in advance, and with how much notice. Read that clause before you schedule the work, not after.
The 6-Stage Change Record for cannabis LPs
The 6-Stage Change Record below maps Annex 15 section 11 onto how a cannabis site actually runs. Each stage leaves evidence an auditor can open.
1. Propose and describe
Anyone can raise a change request, but QA opens and owns the record. Describe what is changing, why, which rooms, cultivars and batches are affected, and the planned date. Vague scopes like "upgrade flower room lighting" get flagged at audit. Name the rooms.
2. Classify and assess risk
Most quality systems grade changes as minor, major or critical. Use an ICH Q9(R1) tool such as FMEA to score the impact on product quality, documentation, validation, regulatory status, calibration and maintenance. The output tells you whether you need requalification, extra testing or a stability commitment before any batch made after the change can be released.
3. Notify before you act
This is where the two regulatory tracks split. On the EU side, the importer and their QP get notice under the quality agreement. On the Canadian side, Health Canada cares about changes that touch your licence: site personnel changes go into CTLS within five days, and a new site location needs a new licence application.
The Cannabis Regulations streamlining amendments published in the Canada Gazette on March 12, 2025 reduced several reporting and security burdens. Some site plan changes, such as adding an operations area inside a building already on your licence, no longer need Health Canada approval first. Health Canada still expects you to update your internal procedures. Eleven months after that Canadian relief, the EMA consultation pointed the opposite way on change control. A change that needs no Health Canada approval can still need your importer's written sign-off.
4. Approve and implement
The responsible people approve only after reviewing supporting data. Implementation follows a plan: installation and operational qualification for new equipment, revised SOPs, retraining records and a defined first batch under the new conditions. Write the batch numbers into the record.
5. Verify effectiveness
Compare the first post-change harvests against a pre-change baseline on potency, terpenes, moisture, water activity and microbial results. Define in advance how many batches you'll compare and what counts as equivalent. Deciding the pass criteria after you've seen the data won't survive an audit.
6. Close and feed the review
Close the record only when effectiveness is proven. If results drift, open a deviation and route it through your deviation and CAPA process. Every closed change then rolls into the annual product quality review, where trends across several small changes become visible.
A change record that stops at approval is half a record.
Where Canadian LPs fail change control audits
These are the five gaps most likely to surface when an EU auditor opens your change log. None of them is exotic.
Facilities projects that bypass QA
Operations scopes an LED retrofit or a new dehumidifier as a capital project, and QA hears about it after installation. The first sign is usually a terpene shift on a COA the importer flags. By then, several batches are already in the supply chain.
Notifying the importer after the fact
A retroactive email is not notice. If the quality agreement asks for advance notice and the change went in first, the importer's QP has grounds to hold every batch made since.
Treating a Health Canada notice as EU clearance
A CTLS amendment governs your licence. It says nothing about whether an EU QP accepts the change. Run both tracks, every time.
Records closed on the implementation date
If the record closes the day the new lights switch on, there's no effectiveness evidence. Annex 15 asks for it where appropriate, and for anything touching flower quality, it's appropriate.
Change logs that don't match the system
Paper change forms with no link to the electronic batch record, or LIMS entries edited without an audit trail, fail on ALCOA+ data integrity before anyone reads the content.
An LP that can't produce a closed change record for its last lighting or HVAC project isn't ready for an EU-GMP inspection. Fix the log before you book the audit.
AlphaLeaf is a Health Canada Licensed Producer growing hand-trimmed flower indoors in Montreal from refined genetics. Our EU-GMP-aligned quality system ties every change to ISO/IEC 17025-tested batch data and full batch traceability, and we hold export authorisation under the Cannabis Act for supply into EU medical channels.
Evaluating a Canadian supply partner? Ask to see their change log before you ask for a price. Contact our team to review ours. It's the fastest test of a supplier.
Frequently Asked Questions
What is change control in cannabis production?
Change control is the documented process a Licensed Producer uses to propose, risk-assess, approve, implement and verify planned changes that could affect cannabis quality or reproducibility. Under EU-GMP Annex 15 section 11, it covers changes to materials, processes, equipment, premises, testing methods and batch size.
Does every change at a cannabis LP need a change control record?
No. Planned changes that could affect product quality, documentation, validation status or regulatory status need a record. Like-for-like replacement parts are usually handled under maintenance, and unplanned events go through the deviation process instead.
Do Canadian LPs have to notify EU importers before making a change?
Usually, yes. The quality agreement between the LP and the EU importer lists which changes are notifiable and how much advance notice is required. Making a notifiable change first and reporting it later gives the importer's QP grounds to hold affected batches.
Is Health Canada approval enough for a change affecting export product?
No. Health Canada approvals and CTLS notices govern your Canadian licence. Whether an EU importer and its QP accept the change depends on EU-GMP expectations and the terms of your quality agreement, so both tracks need to be closed.
Who approves a change at a cannabis LP?
The responsible persons named in the quality system, usually QA leadership, approve the change after reviewing the supporting data. Processing licence holders under the Cannabis Regulations also have a Quality Assurance Person accountable for quality decisions. For EU supply, the importer's QP decides whether batches made after the change can be certified.
How does the 2026 Annex 15 revision affect cannabis suppliers?
The EMA concept paper, open for consultation from February 9 to April 9, 2026, proposes bringing active substance manufacturers fully into Annex 15 and strengthening change control expectations. Where dried cannabis flower is handled as an active substance, requirements that were recommended could become mandatory.
