Biocide Recalls in Canada: The Duty That Binds Anyone Who Sold the Product

Most Canadian businesses that sell disinfectants and sanitizers assume recalls are someone else's problem. They picture a factory pulling defective product off a line, not a distributor, a wholesaler, or an institutional supplier. Under the Biocides Regulations, that assumption is wrong, and it can be expensive. The recall system requirement does not begin with a manufacturing licence. It begins the moment you sell a biocide.

The Biocides Regulations (SOR/2024-110) came into force on 31 May 2025. They created a single, product-based framework for disinfectants, sanitizers and other biocides that were formerly regulated as drugs with a Drug Identification Number or through the Pest Control Products framework. Much of the industry discussion has focused on market entry: what a biocide is, how to file a transition application, and how the Canadian rules compare with the United States and the European Union. Almost none of it addresses what happens after the sale, when a product has to come back. That gap is the subject of this guide.

Executive summary

The recall duties in the Biocides Regulations sit in sections 48 to 50. Section 48 requires any person that has sold a biocide to maintain a system of control, including records, that permits a complete and rapid recall. Section 49 governs a recall the company decides to run itself, with a 24-hour reporting clock, a 72-hour strategy deadline and a 30-day close-out. Section 50 governs a recall the Minister orders. The scope is unusually wide, the records rule is different from the drug and natural health product norm, and the reporting clocks differ across product types. Firms that hold mixed portfolios of drugs, natural health products and biocides are the most exposed, because they tend to apply one recall procedure to everything.

What the Biocides Regulations require on recalls

What it is. A biocide recall obligation is a standing duty to be able to remove a product from the market quickly, plus a set of reporting duties that trigger when a recall actually happens. It is set out in sections 48 to 50 of the Biocides Regulations. Section 48 is the always-on part: the system and the records. Sections 49 and 50 are event-driven: they set out what you must tell the Minister of Health, and by when, once a recall is under way.

Why it matters. Recall readiness is not a document you write once. It is a capability that either exists or does not when Health Canada calls. If you cannot identify, within hours, which lots went to which customers and in what quantity, you do not have a compliant system, no matter what your binder says. Health Canada expects the system to be tested, and it expects the records to be there.

What companies should do. Confirm whether you are a person that has sold a biocide. If you are, build and periodically test a recall system, keep distribution records for the required period, and write a recall procedure that names the 24-hour, 72-hour and 30-day obligations explicitly. Do not assume a supplier's recall procedure covers you. It does not.

Who is bound: any person that has sold a biocide

The single most important sentence in the recall regime is section 48(1). It reads: any person that has sold a biocide must maintain a system of control, including records, that permits the complete and rapid recall of the biocide from the persons to whom they have sold it, other than consumers that purchased the biocide at the retail level. Read that class carefully. It is open-ended. It is not a list of licence holders. It is anyone who sold.

This matters because the drug and natural health product recall regimes work differently. Under the Food and Drug Regulations and the Natural Health Products Regulations, recall-system duties attach to defined actors such as manufacturers, importers and distributors. The biocide framing is broader. A wholesaler, a distributor, a redistributor, and an institutional seller can all be captured. The only carve-out is the sale to a consumer at the retail level. That carve-out is narrow, and it does not release you from the duty to trace product sold to non-consumers upstream of that final retail sale.

The practical consequence is a duty to plan for institutional purchasers. Hospitals, long-term care homes, schools, restaurants, food premises and agricultural establishments buy disinfectants and sanitizers in volume and are not retail consumers. If you sold to them, you must be able to reach them in a recall. That means their contact details, the lots they received and the quantities all need to be in your system before anything goes wrong.

How the scope compares across product types

Product type	Who carries the recall-system duty	Retail-consumer carve-out
Biocides (SOR/2024-110, s.48)	Any person that has sold a biocide	Yes, sales to consumers at the retail level are excluded from the traceability system
Drugs (Food and Drug Regulations)	Defined actors such as manufacturers, importers and distributors	Framework built around enumerated licence holders
Natural health products (NHP Regulations)	Product licence holders, importers and distributors	Framework built around enumerated actors

Records and retention: the six-year rule that is not a blanket rule

What it is. Section 48(2) sets how long you must keep each recall-related record. Where an expiry date is shown on the label, you keep the record until at least the last day of the month shown as that expiry date. Where no expiry date is shown, you keep the record for at least six years after the day you sold the biocide.

Why it matters. This is where many quality systems get it wrong. The familiar drug convention is one year past expiry. Biocide records do not follow that convention. And the six-year figure is not a general retention period for all biocide records. It is the residual rule that applies only when there is no expiry date on the label. Writing your SOP to say six years or the expiry date, whichever is longer, misstates the regulation. The regulation does not say that.

What companies should do. Map your product range by whether each label carries an expiry date, then set retention rules per product rather than a single blanket period. For products with no expiry date, the six-year clock runs from the day of sale, so your record system needs the sale date, not just the manufacture date.

The three clocks in a voluntary recall

What it is. Section 49 governs a recall you decide to run yourself, without being ordered to. It applies where the person deciding to recall is the holder of the market authorization, an importer of the biocide, or a person that manufactures the biocide and sells it. Once that decision is made, three clocks start.

Within 24 hours of making the decision to recall, you provide the Minister, in writing, with the information set out in section 49(2). That list is long. It includes brand names, the identification number, lot numbers and expiry dates, quantities manufactured, imported, sold, exported and still in your control, the period of sale, a risk assessment, and two elements that have no clean drug or natural health product analogue: the names of the persons in Canada, other than retail consumers, to whom you sold and the quantity sold to each, and the classes of persons from whom the biocide is being recalled.

Before you start the recall, section 49(3) requires you to give the Minister a copy of the communications you intend to use. Within 72 hours of the decision, section 49(4) requires your recall strategy and a description of the measures intended to prevent recurrence. Within 30 days of completing the recall, section 49(5) requires the results and, again, the recurrence-prevention measures. Recurrence prevention appears twice, which is a strong signal that Health Canada expects real root cause work, not a box tick.

Trigger	Deadline	What you must provide
Decision to recall (s.49(1) and (2))	Within 24 hours	The full written information package in section 49(2), including named non-retail purchasers, quantities, and classes of persons from whom the product is recalled
Before starting the recall (s.49(3))	Before start	A copy of the recall communications you intend to use
Decision to recall (s.49(4))	Within 72 hours	The recall strategy and the measures intended to prevent recurrence
Completion of the recall (s.49(5))	Within 30 days	The results of the recall and the recurrence-prevention measures taken or to be taken

When the Minister orders the recall

Section 50 covers a recall the Minister orders under section 21.3 of the Food and Drugs Act. Where the Minister orders a recall, you provide the information in section 50(1) in the time and manner the Minister specifies. That information includes a named contact, known manufacturers and importers, the quantity sold at retail to consumers, the identities and quantities for non-consumer purchasers, export quantities by country, the quantity still in your control, your recall strategy, and, where you can, the measures you intend to take to prevent recurrence.

Section 50(4) adds a distinct clock: you must notify the Minister in writing, within 24 hours, of both the start and the completion of the recall. As with a voluntary recall, section 50(5) requires the results within 30 days of completion. The ordering power exists where the Minister believes a product presents a serious or imminent risk of injury to health, so an ordered recall is, by definition, a high-stakes event where speed and accuracy of records decide whether you cope or scramble.

Biocides, drugs and natural health products: three regimes, three clocks

The most common failure among firms with mixed portfolios is to apply one recall SOP to every product line. The reporting clocks are not the same. For biocides and for drugs, the report to the Minister is due within 24 hours of the decision to recall. For natural health products, the report is tied to initiation of the recall on a different timeline. If your recall decision tree does not branch by product type, you will apply the wrong clock under pressure.

Feature	Biocides (SOR/2024-110)	Drugs and NHPs
Who holds the recall-system duty	Any person that has sold a biocide, other than to retail consumers	Enumerated actors such as manufacturers, importers, distributors and licence holders
Voluntary recall report to the Minister	Within 24 hours of the decision to recall (biocides)	Drugs within 24 hours of the decision; NHP timelines are set separately and are tied to initiation
Classes of persons element	Required (s.49(2)(m)): the classes of persons from whom the biocide is recalled	No direct biocide-style equivalent
Records retention default	To expiry-date month end, or at least six years from sale where no expiry date	Commonly tied to one year past expiry conventions

A note on the guidance document

Health Canada's operative recall guidance is GUI-0039, the drug, natural health product and biocide recall guide. It is a useful roadmap. It is not, however, the law, and there are two reasons to quote the regulation rather than the guide on the fine points. First, GUI-0039 refers to the Biocides Regulations by that name and does not cite the SOR number, so cite SOR/2024-110 from the Justice Laws consolidation. Second, the biocides portion of the guide contains at least two drafting slips where it says drug in places that, read against the regulation, must mean biocide. On the exact wording of a duty, quote section 48, 49 or 50 directly.

Biocide recall compliance checklist

Confirm your status. Determine whether your business is a person that has sold a biocide, other than to retail consumers, and therefore carries the section 48 recall-system duty.
Build the traceability system. Maintain records that let you identify, within hours, which lots went to which non-retail customers and in what quantity.
Set retention per product. Keep records to the expiry-date month end where an expiry date is shown, and for at least six years from the day of sale where no expiry date is on the label.
Capture institutional purchasers. Record contact details, lots and quantities for hospitals, schools, restaurants, food premises and agricultural establishments you supplied.
Write a product-branched recall SOP. Name the 24-hour, 72-hour and 30-day obligations and branch the decision tree by biocide, drug and natural health product.
Prepare the section 49(2) information package as a template so you are not assembling it from scratch during a live recall.
Draft recall communications in advance and know that you must give the Minister a copy before you start the recall.
Test the system with a mock recall at least once a year and keep the evidence, including your time to reconcile quantities.
Close the loop with real root cause analysis, since recurrence prevention is required at both the 72-hour and the 30-day stages.

Common mistakes

Assuming the supplier's recall procedure covers you. Section 48 binds the person that sold. If you resold a biocide to non-retail customers, you carry your own traceability duty, regardless of what your supplier does.

Treating six years as a blanket retention period. It is the residual rule for products with no expiry date on the label. Products with an expiry date follow the expiry-date-month rule.

Applying one recall clock to every product. Biocides and drugs report within 24 hours of the decision, while natural health products run on a separate timeline tied to initiation. A single procedure invites the wrong clock.

Forgetting the classes of persons element. Section 49(2)(m) asks for the classes of persons from whom the biocide is recalled. This is biocide-specific and easy to miss if you copied a drug template.

Skipping recurrence prevention. The regulation asks for it twice. A recall report without a credible root cause and corrective action plan is incomplete.

Frequently asked questions

Do I need a recall procedure if I only sell disinfectants and do not make them?

Yes. Section 48(1) of the Biocides Regulations applies to any person that has sold a biocide, other than to consumers at the retail level. Selling, not manufacturing, is the trigger. If you resold to distributors, wholesalers or institutional buyers, you must maintain a system that permits a complete and rapid recall from them.

How long must I keep biocide sales records in Canada?

Where an expiry date is shown on the label, keep the record until at least the last day of the month shown as the expiry date. Where no expiry date is shown, keep the record for at least six years after the day you sold the biocide. These rules come from section 48(2).

How fast must I report a biocide recall to Health Canada?

For a voluntary recall, you must provide the Minister with the section 49(2) information in writing within 24 hours of making the decision to recall. Your recall strategy and recurrence-prevention measures are due within 72 hours, and the results within 30 days of completing the recall.

Is a biocide recall the same as a drug recall in Canada?

Not quite. The reporting clock for a voluntary biocide recall matches the 24-hour drug clock, but the class of persons bound is wider, the records retention default differs, and section 49(2)(m) adds a classes-of-persons element that has no direct drug equivalent. Natural health products run on a separate timeline. Treat the three as distinct.

Do retailers have to recall biocides?

The traceability system in section 48(1) excludes sales made to consumers at the retail level, so you are not required to trace individual retail buyers. You are still required to trace product sold to non-consumers, such as institutional and commercial purchasers, and a retailer that also supplies such buyers is captured for those sales.

When did the Biocides Regulations come into force?

Section 86(1) provides that the Regulations come into force on the first anniversary of the day they were registered. They were registered on 31 May 2024, so they came into force on 31 May 2025. The transition-application window and the end of the transition period run from later anniversaries.

How MFLRC can help

MF License and Regulatory Consultants builds and tests recall systems that hold up under Health Canada scrutiny. For biocide sellers, importers and manufacturers, that means practical deliverables rather than generic templates: a product-branched recall SOP that names the 24-hour, 72-hour and 30-day duties, a distribution-record and traceability review, a pre-built section 49(2) information package, and a mock recall that proves the system works before an inspector or an incident tests it for you. We also connect recall readiness to your wider quality system, including CAPA and root cause work and the SOPs every licensed facility gets wrong.

Our biocides work sits alongside our broader regulatory affairs, licensing and import and export and audit services, so a recall review can extend into gap assessments, quality system documentation, and inspection readiness. If you already sell disinfectants or sanitizers in Canada, the biocide transition-application and claims rules complete the picture.

Selling a disinfectant or sanitizer in Canada means you carry a recall obligation, whether or not you manufacture it. Book a consultation for a scoped review of your biocide recall readiness.

Book a Biocide Recall Readiness Review

Conclusion

The recall regime in the Biocides Regulations is short, but it reaches further than most sellers expect. Section 48 makes traceability a standing duty for anyone who sold a biocide to non-retail buyers. Sections 49 and 50 turn a recall decision into a tightly timed reporting exercise. The businesses that will cope are the ones that built the records, wrote the product-branched SOP and tested the system before they needed it. The ones that will scramble are the ones that assumed a recall was someone else's problem. The rules are in force now, and the safest posture is to treat recall readiness as a capability you can demonstrate, not a document you can produce.