Section 46 of the Cannabis Regulations does not ask whether you have ever had a recall. It asks whether you could run one, completely, on any lot you have already shipped. For a Montreal Licensed Producer with flower sitting in a German importer's warehouse, Health Canada answers the obvious follow-up question in one line of its recall guide: a recall covers cannabis that has been sold, distributed or exported.
Cannabis recall requirements for Canadian LP exporters live in three parts of the regulations. Section 46 requires a control system plus a recall simulation every 12 months. Records of everything sold, distributed or exported fall under section 227. Section 247 then sets the reporting sequence to Health Canada. Export adds a fourth layer, because the destination regulator runs its own procedure at the same time.
Most LPs can produce the paperwork eventually. Fewer can produce it inside one business day, in both official languages, with a foreign consignee list attached. That gap is where recalls fail.
Cannabis recall requirements start long before a recall
Under section 46(1), every licence holder other than an analytical testing or cannabis drug licence holder must establish and maintain a system of control that permits the rapid and complete recall of any lot or batch sold or distributed. The word doing the work there is complete. A control system that finds 80 percent of a batch is not a control system.
Section 46(2) turns that into something an inspector can actually test. You must run a recall simulation, sometimes called a mock recall, at least once every 12 months, using your own written procedures rather than a generic template. The simulation record has to be kept for at least two years. You do not file it with Health Canada, but Health Canada can ask for it at any time or pull it during an inspection.
What a defensible simulation record contains
- The scenario, including the specific lot chosen and why
- The date and time the simulation started and finished
- Whether staff actually followed the written procedure
- Whether every affected supply chain customer was identified quickly
- Whether recalled quantities reconciled against what was produced, distributed and still in inventory
- Problems encountered, plus when and how they were corrected
Sections 224 to 227 sit underneath all of it. Section 227 is the one exporters should read twice, because it covers cannabis sold, distributed and exported. Health Canada's stated expectation is that relevant records can be retrieved within one business day. That is the practical standard, not the two-year retention rule everyone quotes.
The simulation is the fastest thing an auditor can falsify. A GPP audit that opens with a request for last year's simulation record and receives a two-line email has already told the inspector what the rest of the quality system looks like.
The six-step recall process and where the clock starts
Health Canada splits a voluntary recall into six steps: identify the need, build a strategy and define scope, inform Health Canada, notify supply chain customers, follow up, then review and close. The ordering matters more than the count. Health Canada must be told before you contact a single customer, through the initial report required by subsections 247(1) and 247(2).
Then the timers start. A risk evaluation is due within 72 hours of that initial report under subsection 247(3). Health Canada assigns a risk type based on what you filed, and the risk type sets your contact deadline and how hard you have to chase anyone who goes quiet.
| Risk type | What it means | First contact | Non-responder follow-up |
|---|---|---|---|
| Type I | Reasonable probability of serious harm or death | Within 1 business day | No non-responders accepted |
| Type II | Temporary harm, serious harm remote | Within 4 business days | Three documented attempts |
| Type III | Adverse health consequences unlikely | Within 7 business days | Two documented attempts |
Progress reports go in at intervals you agreed in the initial report. The final report is due within 30 days of completing the recall under subsection 247(4), and copies of the initial report, risk evaluation, progress reports and final report have to be kept for at least two years under subsection 247(6). If you expect the recall to run past two weeks, the initial report needs a rationale explaining why.
Two details catch Canadian LPs repeatedly. Recall notifications to supply chain customers are expected in English and French, which means the templates need to exist before the incident, not during it. And the voluntary route is not the only route: sections 75 and 76 of the Cannabis Act let the Minister order a recall if the collaborative approach fails.
Seventy-two hours sounds generous until you have lived through it. You are drafting a risk evaluation while simultaneously reconciling batch traceability records and building a consignee list. The teams that survive it are the ones who wrote the risk evaluation template a year earlier.
What changes when the batch has already left Canada
Export does not soften the obligation. It doubles the paperwork. The initial report to Health Canada must state whether the affected product was sold in Canada or exported from Canada, and the export branch demands its own data set:
- The quantity you produced or imported into Canada
- The quantity sold or distributed in foreign countries
- What remains in your possession
- How many foreign persons received it
- The exact period during which you supplied them
Licensed Producers get stuck at the same place every time. Your Canadian lot number is often not the identifier the end customer ever sees. German importers relabel under their own article numbers before the product reaches a pharmacy. Australian sponsors apply their own batch identifiers under local rules. If your distribution record stops at the importer's loading dock, your recall stops there too, and no amount of internal traceability fixes that. The remedy is contractual rather than technical: a recall clause obliging the importer to maintain onward distribution records and produce them inside a defined window.
The second regulator you did not report to
In the European Union, Chapter 8 of the EU-GMP guidelines, covering complaints, quality defects and product recalls, has been in operation since 1 March 2015. It requires the Qualified Person who certified the batch to be made formally aware of investigations, risk-reducing actions and recall operations in a timely manner. Root cause analysis and corrective and preventive actions are mandatory, not optional. And where a defect may lead to a recall or an abnormal restriction in supply, all concerned competent authorities must be informed. Your importer's QP batch release file is where your data lands.
Australia rewrote its procedure in 2025, and the date matters. On 5 March 2025 the Therapeutic Goods Administration replaced the Uniform Recall Procedure for Therapeutic Goods with the Procedure for Recalls, Product Alerts and Product Corrections. The mechanics are broadly similar. The sponsor still notifies the TGA and waits for an agreement letter before distributing customer letters, and penalties still apply for failing to notify. But any supply agreement drafted before that date and still naming the URPTG is now pointing at a superseded document. Check yours.
Destination markets also test different parameters at the border, which changes what counts as a defect in the first place. We covered that market by market in our guide to export testing requirements across four markets. Read it next to your recall procedure, not separately from it.
An LP that cannot produce a foreign consignee list within one business day is not export-ready, whatever the certificate of analysis says. Testing proves the batch was good when it left. Recall records prove you can find it when it is not.
The 4-point recall readiness check importers should run
Buyers rarely ask about recalls during supplier qualification. They ask about potency, microbials and lead times, then discover the gap eighteen months later when a batch is already in market. Four questions close most of it.
- The simulation record. Ask for the date of the last recall simulation and the document itself. If it is older than 12 months, the LP is out of compliance with subsection 46(2), not merely disorganised.
- Retrieval time. Name a lot from a past shipment and ask for the full distribution record. Time the response. One business day is the benchmark Health Canada works to.
- Notification templates. Ask to see the bilingual recall notification template and the risk evaluation format. Existing templates mean a rehearsed process. No templates mean improvisation under a 72-hour clock.
- The contract clause. Confirm who notifies whom, within what window, who carries destruction costs, and who talks to the destination regulator. Most cannabis supply agreements are silent on all four.
AlphaLeaf is a Health Canada Licensed Producer in Montreal, growing indoor, hand-trimmed flower from refined genetics. We hold export authorisation under the Cannabis Act and maintain the ISO/IEC 17025 batch testing and full traceability records that let a recall reach a German or Australian consignee list without a scramble.
If you are qualifying a Canadian supply partner for the medical channel, ask us for the simulation record before you ask us for a price. Talk to our quality team and we will walk you through the documentation. It takes an afternoon. It saves a market.
Frequently Asked Questions
How often must a Canadian cannabis licence holder run a recall simulation?
At least once every 12 months, under subsection 46(2) of the Cannabis Regulations. The simulation must follow the licence holder's own written recall procedures, and the record of how it was conducted and what it found must be retained for at least two years. Health Canada does not need to be notified at the time, but can request the record at any point or review it during an inspection.
Do Health Canada recall rules apply to cannabis that has already been exported?
Yes. Health Canada defines a recall as covering cannabis that has been sold, distributed or exported. The initial report must state whether the affected product went to the Canadian market or was exported, and exported product triggers a separate data set covering quantities supplied in foreign countries, how many foreign recipients there were, and the period of supply.
How long does a Licensed Producer have to submit a risk evaluation after reporting a recall?
72 hours from the initial report, under subsection 247(3) of the Cannabis Regulations. The initial report itself must reach Health Canada before the licence holder notifies any supply chain customer, so the risk evaluation is typically drafted while the consignee list is still being assembled.
When is the final recall report due to Health Canada?
Within 30 days after the recall has been completed, under subsection 247(4). The final report covers quantities recovered, destroyed, used and not recovered, the number of non-responding customers, the completion date, and the measures taken to stop the problem recurring. Copies of all recall reports must be kept for at least two years under subsection 247(6).
Who notifies the importing country's regulator when exported cannabis is recalled?
In practice the local sponsor, importer or marketing authorisation holder notifies their own regulator under that country's procedure, such as EU-GMP Chapter 8 in the European Union or the Procedure for Recalls, Product Alerts and Product Corrections in Australia. The Canadian Licensed Producer still has to supply the underlying batch and distribution data. The supply agreement should name who does what and within what window.
What should a B2B buyer verify about a Canadian LP's recall readiness before signing?
Four things. First, the date and content of the last recall simulation record. Second, how long the LP takes to produce a full distribution record for a named lot. Third, whether bilingual recall notification and risk evaluation templates already exist. Fourth, whether the supply agreement defines notification duties, timelines, destruction costs and who contacts the destination regulator.
