ISO 17025 Accreditation in Canada: The Nonconformities That Follow Pharmaceutical Labs Into Their Health Canada GMP Audits

Most pharmaceutical manufacturers treat their contract lab’s ISO 17025 certificate as a checkbox. They receive it at qualification, file it, and move on. That’s a reasonable approach — right up until a Health Canada GMP inspector asks to see the lab’s most recent nonconformity report.

What they find in that document often tells a different story than the accreditation certificate suggests. ISO 17025:2017, published by ISO in November 2017 and adopted as the Canadian standard CAN/CGSB-ISO/IEC 17025, establishes requirements for laboratory competence across 25 primary clauses. The Canadian Association for Laboratory Accreditation (CALA) and several SCC-recognized accreditation bodies assess labs against these requirements on a regular cycle. Labs can — and frequently do — receive accreditation while carrying open or recently closed nonconformities that speak directly to data quality.

This matters for pharmaceutical and natural health product manufacturers operating under Canada GMP requirements, because your quality system is only as defensible as the data it relies on. If your testing partner is running with unresolved gaps in method validation or traceability, those gaps become yours the moment an auditor connects them to a batch release decision.

The Nonconformities That Appear Most Often — and Why

Four areas generate a disproportionate share of nonconformity findings in Canadian pharmaceutical lab assessments. None of them are exotic. That’s part of what makes them persistent.

Clause 7.2 — Method Validation

Method validation is the most fundamental expression of analytical confidence, and it’s also where documentation falls apart most reliably. The problem isn’t usually that labs haven’t validated their methods — it’s that their validation records don’t demonstrate fitness for the specific purpose claimed in their scope of accreditation.

A lab might have validated a USP HPLC method for assay of acetaminophen in tablet dosage forms, but their validation data doesn’t include matrix-specific recovery experiments for chewable formulations. When a client submits a chewable product, the lab runs the method anyway. It probably generates accurate results. But the documented evidence of that accuracy doesn’t exist, which means a Health Canada reviewer or GMP auditor has no basis to trust the data — only the lab’s assurance.

Under CAN/CGSB-ISO/IEC 17025:2017, Clause 7.2.2 requires that laboratories verify appropriateness of methods for intended use. “Appropriateness” is not a general term. It’s matrix-specific, concentration range-specific, and often regulatory guidance-specific. For pharmaceuticals, you’re often looking at ICH Q2(R1) as the validation benchmark. Labs that validated methods to earlier ICH versions and haven’t bridged that documentation are carrying a quiet risk.

Clause 7.6 — Measurement Uncertainty

Every quantitative analytical result carries uncertainty. The question isn’t whether uncertainty exists — it’s whether the lab has characterized it, reported it appropriately, and incorporated it into its interpretation of results against specifications.

This is the nonconformity that surprises manufacturers most, because it seems abstract until it isn’t. If a specification limit is 98.0% and the measured assay is 97.8% with an expanded uncertainty of ±0.4% (at k=2, 95% confidence level), the result is not a straightforward OOS finding. The true value could be anywhere from 97.4% to 98.2%. A lab that reports “97.8% — FAIL” without surfacing that uncertainty has handed your quality team an incomplete data set for a potentially consequential decision.

Canada GMP guidelines, specifically Health Canada’s GUI-0001, don’t explicitly prescribe measurement uncertainty reporting, but they do require that test methods generate reliable data. When that reliability can’t be quantified, the data can’t be fully defended. CALA assessors cite uncertainty nonconformities regularly, and the fix takes longer than most labs expect — it requires reviewing historical method validation data, re-calculating contributions from all relevant sources, and revising SOPs to embed uncertainty estimation into routine reporting.

Clause 6.4 and 6.5 — Equipment Calibration and Metrological Traceability

Calibration nonconformities account for roughly 35% of major findings in pharmaceutical lab assessments globally, and Canadian labs are not an exception. The pattern is almost always the same: equipment was calibrated, but the calibration certificates don’t establish an unbroken chain of traceability to national or international measurement standards.

A balance calibrated against reference weights is only as traceable as the reference weights themselves. If those weights weren’t calibrated by a CALA-accredited or NRC-traceable provider, the chain breaks. A pH meter calibrated with buffers from a supplier whose traceability documentation expired six months ago is another break. These aren’t dramatic failures — they’re the kind of gap that accumulates quietly in busy labs that are focused on throughput.

For pharmaceutical manufacturers, the downstream consequence is real. If a heavy metals result, a pH measurement, or a dissolution data point used for batch release or a regulatory submission was generated on equipment with broken calibration traceability, the reliability of that data point is compromised. Health Canada GMP auditors are increasingly asking for calibration traceability documentation as part of supplier qualification reviews, not just lab audits.

Clause 6.2 — Personnel Competency

Competency records are the nonconformity nobody talks about until an investigation requires them. ISO 17025:2017 Clause 6.2 requires that laboratories document the competency of personnel performing specific activities — not just their qualifications, but evidence that they’ve been assessed as competent against defined criteria for the tasks they perform.

In practice, many labs maintain training records but conflate training attendance with demonstrated competency. These are not the same thing. A technician who attended a training session on HPLC method execution has been trained. A technician who was subsequently observed performing the method, assessed against a defined checklist, and found competent by a qualified evaluator has met the standard. That distinction matters enormously during a GMP audit, because the question isn’t “was this analyst trained?” — it’s “on what basis do you assert this analyst was competent to generate this data?”

How Health Canada GMP Auditors Use This Information

Health Canada’s GMP guidelines for finished pharmaceuticals (GUI-0001) and for natural health products (under the Natural Health Products Regulations) both require that manufacturers use testing methods and laboratories capable of producing accurate, reliable data. In practice, that often means working with ISO 17025-accredited labs — but accreditation itself is a threshold condition, not a guarantee of quality.

When Health Canada inspectors review a manufacturer’s supplier qualification records for their contract testing lab, they’re looking at more than the accreditation certificate. An experienced inspector will ask whether the manufacturer reviewed the lab’s scope of accreditation to confirm it covers the specific methods, matrices, and parameters being tested. They’ll ask whether the manufacturer has seen the lab’s most recent external assessment report. They’ll ask whether any corrective actions from that report are still open, and if so, what the manufacturer’s risk assessment of those open items looks like.

Manufacturers that can’t answer these questions clearly are demonstrating a supplier qualification program that satisfies the paperwork requirement but not the intent. Health Canada auditors distinguish between the two with some consistency.

The practical implication: when you qualify a Canadian testing laboratory, the scope review is not optional. You need to confirm that the lab’s accredited scope explicitly covers the analytical methods you’re using — not just the general technique, but the specific method reference and matrix type. A lab accredited for “HPLC methods for pharmaceutical analysis” may or may not have validated your specific USP compendial method. The scope document will tell you.

What Unresolved Nonconformities Actually Cost

There’s a tendency to think of accreditation nonconformities as the lab’s problem. They’re not, and the cost structure makes that clear.

Re-testing triggered by data reliability questions typically runs $1,500–$4,500 per batch depending on the test panel, and that’s before factoring in the delay costs to batch release. If a nonconformity in calibration traceability calls into question results used to support a Health Canada submission — a New Drug Submission, a Supplementary NDS, or an NHP product licence application — the consequence can be a deficiency notice that extends your timeline by 3 to 6 months. Health Canada’s target review clock for most submissions doesn’t stop while you gather additional data.

And if you’re an importer operating under a Customs Tariff exemption that depends on demonstrating Canadian GMP compliance, a lab-related audit finding can create cascading administrative complications that take considerably longer to resolve than the underlying laboratory issue.

The more defensible approach is to treat your testing partner’s ISO 17025 status as a living document, not a one-time qualification event. That means reviewing updated scope of accreditation annually, requesting assessment reports when they’re issued, and building a corrective action review into your supplier qualification SOP.

What to Ask Your Canadian Testing Lab Before the Next Audit

You don’t need to audit your contract lab the way a regulatory inspector would. But you should be able to answer a short set of questions from your own records:

• Does the lab’s current accredited scope explicitly list the methods and matrices relevant to your products?
• Has the lab provided you with its most recent CALA (or equivalent) assessment report, and have you reviewed it for open nonconformities?
• Are the lab’s calibration certificates for key equipment traceable to NRC or equivalent national metrology institute standards?
• Does the lab calculate and report expanded measurement uncertainty for quantitative results, and at what confidence level?
• Can the lab produce competency records for the analysts who generated your most recent batch release data?

If any of these answers is uncertain, that’s the gap your next supplier re-qualification needs to close. It’s considerably easier to address before an audit than during one.

The ISO 17025 certificate in your vendor file is a starting point. What matters is understanding what sits behind it.

---

Written by Nour Abochama, Quality & Regulatory Advisor, Androxa. Learn more about our team

Talk to our team about Health Canada compliance. Contact us

Related from our network

• ISO 17025 Laboratory Accreditation and US FDA Analytical Requirements — Qalitex Laboratories covers how ISO 17025 scope review factors into FDA supplier qualification for US pharmaceutical manufacturers.
• EU GMP Annex 11 and Laboratory Data Integrity Standards — Care Europe examines how European GMP expectations for computerised laboratory systems intersect with ISO 17025 data integrity requirements.