The European Medicines Agency has scheduled a rewrite of Chapter 9 of the EU-GMP Guide for completion by the end of 2028, according to the 2026 to 2028 work plan of its GMP inspectors working group. Chapter 9 covers self-inspection. Today it runs to three short paragraphs. For a Canadian Licensed Producer supplying the EU medical channel, those three paragraphs decide whether your quality system can prove it checks itself.
A cannabis GMP self-inspection is a scheduled internal audit in which competent, independent staff examine every part of a Licensed Producer's operation against Good Manufacturing Practice, record what they find, propose corrective actions and document how each one was closed. EU-GMP Chapter 9 requires it of every GMP site. Health Canada's good production practices rules don't spell it out, so each LP has to build the program itself, ideally before an importer's auditor asks to see it.
What EU-GMP Chapter 9 requires from a cannabis LP
The text of Chapter 9 is short, and that makes it easy to underbuild. Its principle is that self-inspections monitor how GMP is implemented and propose the corrective measures needed. Three requirements sit underneath:
- A pre-arranged program that examines personnel, premises, equipment, documentation, production, quality control, distribution, complaints and recalls, and the self-inspection process itself (paragraph 9.1).
- Inspections run in an independent and detailed way by designated, competent people from the company, with external audits named as a useful addition (paragraph 9.2).
- A written record of every self-inspection, containing all observations, proposed corrective measures and a statement of the actions later taken (paragraph 9.3).
Chapter 1 of the same guide adds the context. It expects a self-inspection or quality audit process that regularly appraises whether the pharmaceutical quality system is effective. In practice, an EU auditor reads your self-inspection file as evidence of how your quality system behaves when nobody from outside is watching.
Where the Canadian rules differ
Part 5 of the Cannabis Regulations sets out good production practices, and Health Canada verifies them through inspections that can be unannounced. The regulations give the quality assurance person duties around product release and investigating quality complaints, with corrective and preventive measures where needed. What they don't contain is a dedicated self-inspection chapter like EU-GMP Chapter 9. Our guide to QAP requirements covers the Canadian side of that role in detail.
The gap is structural. An LP can pass a Health Canada cannabis inspection cleanly and still have nothing to show an EU auditor who asks for last year's self-inspection reports.
Mapping the Chapter 9 areas to a cannabis facility
Chapter 9 lists the areas but not what they mean inside a cannabis facility. The table below translates each one into the rooms, records and evidence an internal auditor at an LP should actually pull.
| Chapter 9 area | What to examine at a cannabis LP | Evidence to pull |
|---|---|---|
| Personnel | SOP training for growers, trimmers and packers | Training matrix and sign-off records |
| Premises | Grow, drying, curing and vault rooms | Environmental and pest control logs |
| Equipment | Scales, dryers and environmental sensors | Calibration and maintenance records |
| Documentation | SOP versions, batch records, audit trails | Document control index, data review |
| Production | Harvest, drying, trimming and packaging steps | Executed batch records against SOPs |
| Quality control | Sampling, COA review, out-of-specification results | COAs, OOS files, lab contracts |
| Distribution | Storage and export shipment conditions | Temperature data and shipping files |
| Complaints and recalls | Complaint investigations and mock recalls | Complaint log, mock recall report |
| Self-inspection | Closure of the previous cycle's findings | CAPA tracker with verification dates |
Quality control deserves extra time if you outsource testing. Check that your contract laboratory's ISO/IEC 17025 accreditation scope lists each method used on your COAs. If a method isn't on the scope, the result on your COA isn't covered by the accreditation.
Setting the frequency
Chapter 9 sets no frequency. A common pattern is to cover every area at least once a year and to revisit higher-risk areas more often, with the ranking documented through quality risk management under ICH Q9(R1). For most flower producers, drying and curing rooms carry more batch risk than an office filing cabinet. If your schedule gives both the same attention, it isn't risk-based.
The 4-step self-inspection cycle for Licensed Producers
A program that satisfies Chapter 9 on paper can still fail an audit if the cycle breaks between finding and fix. We use a simple structure, the 4-Step Self-Inspection Cycle, to keep each round complete.
1. Plan a risk-ranked schedule
Publish a 12-month calendar that names each area, the auditor and the planned month. Build it around harvest and shipment peaks. A schedule that slips every time production gets busy is no longer the pre-arranged program paragraph 9.1 asks for.
2. Inspect with independent people
This is where small LPs stall. If your quality team is three people, the person best placed to audit packaging may be the one who wrote the packaging SOPs. Rotate auditors across areas, train production staff from other departments as auditors, and bring in an external auditor for at least one area per cycle. A self-inspection carried out by the supervisor who runs that room isn't a self-inspection. It's a signature on their own work.
3. Report every observation
Paragraph 9.3 asks for all observations, including those too minor to become deviations. Grade them as critical, major or minor, attach the evidence, and propose a corrective measure for each. A full-day inspection that records zero observations should prompt a second look at how the inspection was run.
4. Close, verify and trend
Paragraph 9.3 also asks for a record of the actions taken. A CAPA marked complete, with nothing showing anyone checked that the fix worked, doesn't give an auditor that record. Feed every observation into your deviation and CAPA system, record the verification, and review repeat findings across cycles. Two cycles flagging the same drying-room log gap means the CAPA failed, whatever the tracker says.
EU importers who run supplier audits of Canadian LPs visit for a day or two. Between visits, your self-inspection file is the main evidence they have of how the site runs.
Why the Chapter 1 and Chapter 9 revisions matter now
The European Commission and PIC/S ran a joint consultation on a revised Chapter 1 from 3 September to 3 December 2025. The draft writes ICH Q9(R1) risk management and knowledge management more firmly into the pharmaceutical quality system. The EMA inspectors' 2026 to 2028 work plan then set the end of 2026 as the target for Chapter 1's final text, with Chapter 9 following by the end of 2028.
The order matters. Chapter 1 defines what the quality system must do, and Chapter 9 is the tool that checks whether it does it. A self-inspection program built today on risk-ranked scheduling, independent auditors and verified closure already matches the direction Chapter 1 is taking. A program run as a once-a-year checklist will need reworking when the revised chapters land.
Your next EU supplier audit will apply the current Chapter 9, so there's no reason to wait for the 2028 text. The same applies to the documents that sit beside it, such as your cannabis site master file.
AlphaLeaf is a Montreal-based Health Canada Licensed Producer of indoor-grown, hand-trimmed cannabis flower with refined genetics. We hold export authorisation under the Cannabis Act and maintain EU-GMP-aligned quality documentation, ISO/IEC 17025-tested batch data and full batch traceability for import partners across the EU medical channel.
If you're qualifying a Canadian supplier and want to see how a quality system holds up between audits, contact the AlphaLeaf team or review our certifications and testing standards. Ask to see the self-inspection schedule.
Frequently Asked Questions
What is a GMP self-inspection in cannabis production?
A GMP self-inspection is a scheduled internal audit in which a Licensed Producer's own competent, independent staff check its operation against Good Manufacturing Practice. EU-GMP Chapter 9 requires it to cover personnel, premises, equipment, documentation, production, quality control, distribution, complaints and recalls, and the self-inspection process itself.
How often should a cannabis LP run self-inspections?
EU-GMP Chapter 9 sets no fixed frequency. It requires a pre-arranged program. A common approach is to cover every area at least once a year and to revisit higher-risk areas, such as drying and curing rooms, more often, with the ranking documented through quality risk management.
Who can perform a self-inspection at a cannabis facility?
Chapter 9 calls for designated, competent people from the company who can inspect independently. That means auditors shouldn't inspect their own area. Smaller LPs often rotate quality staff, train auditors from other departments and use an external auditor for part of each cycle.
Is a self-inspection the same as a supplier audit or a Health Canada inspection?
No. A self-inspection is run by the LP on itself. A supplier audit is run by a customer, such as an EU importer, and a Health Canada inspection is a regulatory check of compliance with the Cannabis Regulations. Auditors and inspectors often ask to see evidence that the self-inspection program exists and works.
Does Health Canada require cannabis LPs to run self-inspections?
Part 5 of the Cannabis Regulations sets good production practices but does not contain a dedicated self-inspection chapter like EU-GMP Chapter 9. LPs that export to the EU medical channel need a Chapter 9 program anyway, because EU importers and GMP inspectors assess the site against EU-GMP, including Chapter 9.
What records does a cannabis self-inspection need to produce?
Under paragraph 9.3, each self-inspection needs a written report with all observations, proposed corrective measures where applicable, and a statement of the actions later taken. Linking each observation to a CAPA record with a verification date gives auditors a complete trail.
