Cannabis Mergers and Your Health Canada Licence: The Change-of-Control Checklist

In November 2026, Organigram agreed to acquire Aurora Cannabis in a transaction valued at about C$561 million, while Curaleaf kept a competing offer open. Deals of this size put a question in front of every licensed producer board in Canada: what actually happens to a Health Canada cannabis licence when the company that holds it is bought, sold or merged?

The short answer is that the licence does not change hands the way a building, a brand or a piece of equipment does. A cannabis licence is issued to a specific corporation under the Cannabis Act and the Cannabis Regulations. When ownership or control of that corporation changes, the licence holder on paper can stay the same, but the people who direct and control the business change. That change triggers a defined set of obligations with Health Canada. Miss them, and a clean corporate deal can turn into a compliance problem during the most sensitive phase of the transaction.

This article explains, in plain language, what a change of control means for a Health Canada cannabis licence, what you must report and when, who needs a security clearance, and how to keep the licence in good standing from signing to closing and through integration. It is written for boards, founders, investors and the quality and regulatory leaders on both sides of a deal.

Executive summary

A cannabis licence belongs to the corporation that holds it. A share deal changes who owns and controls that corporation, not the licence holder itself, so the licence is not transferred or re-issued. An asset deal is different, because a licence does not travel with the assets.

Health Canada does not grant a single approval of the transaction as a whole. Its oversight of a change of control runs through three channels: mandatory notices of change, security clearances for the people who will control and run the business, and the Minister's power to require financial information and to refuse, amend or revoke a licence in defined circumstances.

What is a change of control for a cannabis licence?

A change of control happens when the people or entities that own or direct a licensed corporation change, for example through a share purchase, an amalgamation, or a new majority investor. The licence itself stays with the same corporate licence holder, so the deal does not re-issue or transfer the licence. What changes is who sits behind it.

In a share deal, the corporation that holds the licence continues to hold it. Its shareholders, directors and officers change, but the licence holder on the face of the licence is unchanged. In an asset deal, the buyer acquires assets such as a facility, inventory or brands, but not the licence, because a cannabis licence is not a transferable asset. A buyer in an asset deal needs its own licence, or a licence amendment, for the site it is taking on.

The Cannabis Regulations require a licence amendment only for specific changes. Under section 32, a holder must apply to amend the licence if it proposes to change the holder's name, the address of the site or building, or the authorized activity. A change in who owns or controls the corporation is not, by itself, one of those amendment triggers. That is why a change of control is managed mainly through notices and clearances rather than through a licence amendment. Keeping the licence valid through the change is central to keeping the business in good standing.

Does Health Canada have to approve a cannabis acquisition?

No. Health Canada does not issue a single approval of the transaction itself. Its oversight runs through three channels: notices of change, security clearances, and the information the Minister can require and act on.

The Cannabis Act lets the Minister require information with a licence application, including financial information. Financial information about an organization is defined to include information about its shareholders or members and who controls it, directly or indirectly (Cannabis Act section 62). The Minister may refuse to issue, renew or amend a licence where a security clearance has been refused or cancelled, and may revoke a licence where a security clearance has been cancelled (sections 62 and 65). The Minister may also amend a licence on the Minister's own initiative to protect public health or public safety (section 63).

So while there is no single deal approval, Health Canada holds real levers over a change of control. The clearances and the notices are mandatory, not optional courtesies, and a problem with either can reach the licence itself.

Who needs a security clearance when control changes?

Under section 50 of the Cannabis Regulations, directors and officers, any individual who exercises or is in a position to exercise direct control over the corporation, the responsible person, the head of security, the master grower at a cultivation site and the quality assurance person at a processing site, together with their alternates, must hold a security clearance. A new controlling investor falls squarely within this.

The table below maps the common roles to the requirement and the relevant provision. It is drawn from section 50 of the Cannabis Regulations and Health Canada's security clearance process guidance.

Health Canada's process page puts it in plainer terms: a security clearance is required by the owning or parent company (anyone with direct control, including directors and officers), the applicant or licence holder (for a corporation, its directors and officers and anyone with direct control), and key site personnel. The page notes that key investors might have direct control and would then also require a clearance, and that Health Canada can request additional people to hold a clearance by name or position.

What must you report to Health Canada, and when?

The Cannabis Regulations require a licence holder to notify the Minister within five days after certain changes occur, including the replacement or addition of an individual who must hold a security clearance (section 34). Health Canada's own instructions confirm a five-day window for changes to directors and officers, the responsible person, the head of security, the master grower and associated individuals.

Section 34 requires notice within five days after the change occurs when a licence holder replaces or adds an individual who must hold a security clearance under the relevant parts of section 50. The notice must describe the change and carry an attestation signed by the responsible person. For a change involving an individual, it must include the person's name and date of birth, and for a new director or officer it must include the certificate of incorporation or the amended incorporating instrument.

Health Canada's instructions for changing your identified people set out how each change is made. Directors and officers are reported by email within five days. The responsible person, head of security, master grower and associated individuals are updated within five days, largely through the Cannabis Tracking and Licensing System. In every case, the person must hold a valid security clearance before starting the role. A person may take a director or officer role before clearance only if the notice gives the reason and the measures that restrict their influence, such as making no financial decisions.

Two practical points follow. First, the five-day clock starts when the change occurs, which for most deals means the closing date, so the notice packages have to be prepared before signing, not drafted afterward. Second, the organizational security plan must also be updated within five days of a change to identified people.

The key investor record and annual reporting

Separate from security clearances, every licence holder must keep a key investor record and report it to Health Canada each year. A change of control usually brings new key investors into that record.

Under section 241 of the Cannabis Regulations, the key investor record covers each key investor's name, address, means of control and transactions. A key investor is a person that exercises, or is in a position to exercise, direct or indirect control over the holder, either by providing money, goods or services, or by holding an ownership interest or other right in a business operated by the holder. By January 31 each year, the holder must give the Minister a copy of the record and details of anyone who stopped being a key investor during the previous year. Holders whose equity is listed on a published market, or who are wholly owned by such a company, are exempt from keeping the record.

Note that the control test is not identical across the regulations. Security clearances under section 50 turn on direct control. The key investor record under section 241 captures direct or indirect control. A new investor can therefore land in the key investor record even where it does not, by itself, require a clearance, so both tests need to be run against a deal.

How long do security clearances take?

Plan for months, not weeks. Health Canada says a security clearance can take a few months for most people, and longer, sometimes over a year, where consultations are needed.

The clearance process assesses whether a person could pose an unacceptable risk to public health or public safety, including the risk of cannabis being diverted to an illicit market. Checks include a domestic criminal record check, a foreign criminal record check if applicable, and a law enforcement record check. If concerning information appears, the person is given a chance to explain the circumstances. Health Canada reports that more than 95% of applications have been granted in the past. Delays tend to come from multiple addresses or employers, travel or residence abroad, consultations with law enforcement partners, and response times from partner agencies.

A clearance can also be suspended or cancelled. After a cancellation, a person generally has to wait five years to reapply unless circumstances have changed. The length of the process is the single biggest reason to start clearance applications for new directors, officers and controlling investors as early in the deal as confidentiality allows. A closing that outruns the clearances leaves the licence holder relying on the limited interim arrangement Health Canada allows, and only where the restrictions on that person's influence are documented.

Regulatory due diligence: what buyers should check

Before closing, a buyer should look past the financial statements at the target's regulatory standing, because inherited compliance problems do not disappear on closing day.

A focused regulatory due diligence review should confirm each of the following:

• Open notices of violation or a compliance agreement with Health Canada, and the status of any undertakings.
• Any administrative monetary penalties, paid or outstanding.
• The recall history and whether any recall actions remain open.
• The accuracy of Cannabis Tracking and Licensing System reporting, and any discrepancies in monthly reports.
• The scope and expiry of any EU-GMP or GACP certificates if the target exports.
• The security clearance status of every current director, officer, responsible person, head of security, master grower and quality assurance person.
• The state of the quality management system, the standard operating procedures and the authority of the quality assurance person.
• The inspection history and any outstanding corrective actions.
• Whether the key investor record is complete and the annual report has been filed.

After closing: keeping the licence in good standing

The licence stays valid through a change of control only if the obligations behind it keep being met. The first ninety days after closing are where integration risk is highest, because two quality systems, two sets of standard operating procedures and two reporting habits have to become one.

A practical integration plan phases the work so that the regulatory obligations are never left undone while the commercial integration races ahead.

Cannabis change-of-control compliance checklist

Use this checklist to turn a transaction into a controlled regulatory process:

• Confirm whether the deal is a share deal, where the licence holder is unchanged, or an asset deal, where a new licence or amendment is needed.
• Identify every individual who will need a security clearance after closing, and start the applications as early as confidentiality allows.
• Prepare change notices for directors, officers, the responsible person, the head of security, the master grower and associated individuals, ready to file within five days of closing.
• Plan any quality assurance person change separately, because a processing quality assurance person change requires Health Canada approval.
• Update the organizational security plan within five days of any change to identified people.
• Update the key investor record and confirm the annual report is filed by January 31.
• Run regulatory due diligence on notices of violation, administrative monetary penalties, recalls, reporting accuracy and certificate scope.
• Keep a dated file of every notice, clearance application and approval, ready for an inspection.

Common mistakes

• Treating closing as a purely corporate event. The corporate deal can close while the regulatory notices and clearances are unfinished, which leaves the licence holder out of compliance from day one.
• Assuming the licence transfers in an asset deal. It does not. A cannabis licence is tied to the corporation and the site, and does not travel with the assets.
• Starting security clearances too late. Clearances take months, and a new director acting before clearance needs a documented rationale and real restrictions on their influence.
• Forgetting the quality assurance person approval step. A processing quality assurance person change needs Health Canada approval, not just a five-day notice.
• Letting the key investor record fall out of date. New investors have to be captured in the record, and the record is reported to Health Canada every January.
• Overlooking EU-GMP or GACP certificate scope. Certificates can lapse or need updating when ownership or the quality system changes, which can interrupt exports at the worst possible time.

Frequently asked questions

Does a Health Canada cannabis licence transfer when the company is sold?

No. The licence is issued to the corporation. In a share deal, the corporation keeps the licence and the licence holder is unchanged. In an asset deal, the licence does not come with the assets, and the buyer needs its own licence or a licence amendment for the site.

Does Health Canada have to approve a cannabis acquisition?

There is no single approval of the transaction. Health Canada's oversight runs through mandatory change notices, security clearances for the new controlling people, and the Minister's power to require financial information and to refuse, amend or revoke a licence in defined circumstances.

Do new directors of a cannabis licence holder need a security clearance?

Yes. Directors and officers, and any individual in a position to exercise direct control over the corporation, must hold a security clearance under section 50 of the Cannabis Regulations.

How long does a cannabis security clearance take?

Health Canada says it can take a few months for most people, and longer, sometimes over a year, where consultations are needed. Start the applications as early in the deal as you can.

How quickly must we notify Health Canada of a change of directors or officers?

Within five days after the change occurs, by email, with the required details, under section 34 of the Cannabis Regulations. The organizational security plan must also be updated within five days.

What is the key investor record?

It is a record each licence holder keeps of every person who exercises, or is in a position to exercise, direct or indirect control over the holder, by funding or ownership. The record is reported to Health Canada each year by January 31. Publicly listed holders, and holders wholly owned by a listed company, are exempt from keeping it.

Can a change of control put the licence at risk?

Yes, if obligations are missed. A refused or cancelled security clearance can lead the Minister to refuse, amend or revoke a licence, so the clearances and notices are the real risk to manage during a transaction.

How MFLRC can help

MF License and Regulatory Consultants supports buyers and sellers through the full regulatory lifecycle of a cannabis transaction. We run regulatory due diligence that tests a target's compliance history, from notices of violation and administrative monetary penalties to recall records, reporting accuracy and certificate scope. We prepare security clearance files and change notices so they are ready to file within the five-day window, and we manage licence amendments where a deal needs them.

After closing, we lead quality system harmonization: a single quality management system, one quality assurance person structure, standard operating procedure rationalization, Cannabis Tracking and Licensing System reconciliation, and continuity of EU-GMP and GACP certificates. Our gap assessments, SOP development, quality assurance person services, audits and Compliance-as-a-Service keep the licence in good standing from signing through integration.

Conclusion

A cannabis licence does not move the way the rest of a business does. It stays with the corporation that holds it, and a change of control is managed through notices, clearances and careful integration rather than a single approval. The deals that go smoothly are the ones where the regulatory work starts before signing: clearances filed early, change notices ready for closing, the quality assurance person approval planned, and a due diligence review that surfaces inherited problems while there is still time to price or fix them. Treat the Health Canada obligations as part of the deal, not an afterthought, and the licence stays an asset rather than becoming a liability.

Sources and references

• Cannabis Regulations (SOR/2018-144), Justice Laws Website
• Cannabis Act (S.C. 2018, c. 16), Justice Laws Website
• Health Canada, Change your identified people (cannabis licence)
• Health Canada, About the process: Cannabis security clearances
• Competition Bureau Canada