A contract research organization receives a new client brief: a mid-stage pharmaceutical product destined for the Canadian market. Before the first analytical run begins, a critical question surfaces — does your facility’s quality system fully satisfy Health Canada’s Good Manufacturing Practices requirements? For many CROs, the honest answer is “we think so,” which is not the same as “yes.”
This article is for pharmaceutical CROs and CMOs operating in Canada, or those seeking to serve Canadian drug sponsors. We outline the core GMP obligations under Health Canada’s framework, where they differ from expectations you may be familiar with from other jurisdictions, and what a compliant quality system looks like in practice.
Health Canada’s GMP requirements for drug establishments are primarily set out in the Food and Drug Regulations, Part C, Division 2 (C.02.001 to C.02.029). These regulations apply to manufacturers, packagers, labellers, distributors, and importers of drugs sold in Canada. CROs performing testing, stability studies, or analytical services on behalf of drug sponsors are typically captured under the “testing” category within this framework.
The regulations require that every establishment involved in drug manufacturing or testing hold a valid Drug Establishment Licence (DEL) issued by Health Canada’s Health Products and Food Branch (HPFB). The DEL specifies the activities the facility is licensed to perform, the dosage forms covered, and the drug classes in scope. Operating outside the scope of your DEL — even temporarily — is a regulatory violation.
Beyond licensing, Division 2 sets out requirements across several operational areas:
For CROs specifically, the quality control and records requirements are particularly scrutinized. Health Canada inspectors expect that analytical methods are validated, that raw data is complete and attributable, and that any out-of-specification (OOS) investigations are documented with scientific rigour.
Many CROs working with active pharmaceutical ingredient (API) manufacturers will be familiar with ICH Q7, the international guideline for GMP for APIs. Health Canada has adopted ICH Q7 as guidance for API manufacturing, and inspectors reference it during assessments of API-related activities.
However, ICH Q7 is guidance, not regulation. The binding requirements remain those in Division 2. Where ICH Q7 provides more specific technical direction — for example, on impurity profiling, reprocessing, or computerized system validation — it is treated as the expected industry standard even if not explicitly mandated in the regulation text. In practice, this means that a CRO whose quality system meets ICH Q7 will generally satisfy Health Canada’s expectations, but the reverse is not automatically true.
One area where Health Canada’s approach may differ from what CROs encounter in the United States (FDA) or Europe (EMA) is the inspection model. Health Canada conducts risk-based inspections, and the frequency and depth of inspection depend partly on the establishment’s compliance history and the risk profile of the activities performed. Requirements may vary depending on the drug class and dosage form — sterile products, for instance, face more intensive scrutiny than solid oral dosage forms.
We work with CROs at various stages of quality system maturity. In our experience, the gaps that most commonly surface during Health Canada inspections fall into a few recurring categories.
Documentation gaps: Health Canada inspectors expect that every significant activity is documented contemporaneously, that records are attributable to the person who performed the work, and that any correction is made in a way that preserves the original entry. Electronic records systems must comply with data integrity expectations consistent with ALCOA+ principles (Attributable, Legible, Contemporaneous, Original, Accurate, plus Complete, Consistent, Enduring, and Available).
Change control weaknesses: Changes to validated methods, equipment, or processes must flow through a formal change control procedure. We frequently see CROs that have strong initial validation packages but lack a robust system for managing post-validation changes — a gap that can invalidate the original validation in the eyes of an inspector.
Supplier qualification: For CROs performing testing on behalf of sponsors, the sponsor is often the “manufacturer” for regulatory purposes, but the CRO remains responsible for the quality of its own reagents, reference standards, and consumables. A documented supplier qualification program is expected.
OOS investigation procedures: Health Canada expects a written procedure for investigating OOS results that distinguishes between laboratory error and genuine product failure. The investigation must be documented, and the conclusion must be scientifically defensible.
Before accepting a new client or expanding your service scope, consider the following:
Health Canada’s GMP requirements are detailed and evolving. Requirements may vary depending on the specific drug class, dosage form, and activities in scope. We recommend consulting a qualified regulatory expert before making significant changes to your quality system or expanding your service offering.
At Androxa, we support pharmaceutical CROs and CMOs in building quality systems that satisfy Health Canada’s expectations — from initial gap assessments to inspection readiness reviews. Contact our team at testing-lab.ca to discuss your compliance needs.