Cannabis Quality Assurance Person (QAP): Duties, Authority and Inspection Findings in 2026

Every lot of cannabis a licensed processor sends to market in Canada passes through one person before it can be sold. That person is the quality assurance person, or QAP. Under the Cannabis Regulations, no dried flower, extract, edible, or topical can be made available for sale until the QAP has assured its quality. It is one of the few roles in Canadian cannabis law where a single named individual carries personal, legal responsibility for a product that reaches the public.

The role has not become easier in 2026. On 1 October 2026, a set of amendments to the Cannabis Regulations came into force under SOR/2025-244, the new Controlled Substances Regulations took effect the same day, and Health Canada's latest inspection data showed the same findings repeating across the sector. The QAP sits at the centre of all three. This guide explains what a cannabis QAP actually does, where their authority comes from, what changed on 1 October 2026, and the inspection findings that land squarely on the quality unit.

Executive Summary

A cannabis QAP is the individual a licensed processor must appoint to assure product quality before sale, investigate complaints, and act on suspected risks. The duties are set out in section 19 of the Cannabis Regulations and apply to processing licence holders. The 1 October 2026 amendments did not rewrite the QAP role itself, but they tightened the obligations the QAP must oversee, including personnel knowledge standards, record retention, and destruction controls. Health Canada's 2025 to 2026 inspection summary reported 902 inspections and 29 non-compliant reports, with recurring findings tied directly to responsibilities, good production practices, and record keeping.

What Is a Cannabis Quality Assurance Person (QAP)?

A cannabis quality assurance person is the individual that a holder of a cannabis processing licence must retain to assure the quality of cannabis before it is made available for sale. The role is defined in section 19 of the Cannabis Regulations. The QAP must have the training, experience, and technical knowledge needed to apply Parts 5 and 6 to the class of cannabis the licence covers.

Part 5 of the Cannabis Regulations sets out Good Production Practices. It opens with definitions at section 78.1, general requirements at section 79, additional requirements for processing at section 88, and testing at section 89. Part 6 governs cannabis products themselves, including composition, limits, and permitted forms. The QAP is the person expected to know both parts well enough to judge whether a lot meets them. A recall, handled under the separate system of control for recalls in Part 11, is the downstream consequence when that judgment is tested. For the testing side of the role, see our guide to Health Canada's cannabis method validation guidance.

Which Licence Holders Must Appoint a QAP?

The QAP requirement attaches to the processing licence. Section 19(1) states that a holder of a licence for processing must retain the services of one individual as a quality assurance person. Cultivation only licences, nurseries, analytical testing licences, and research licences are treated differently and do not carry the same section 19 QAP obligation, although they must still meet good production practices and appoint other named personnel such as a responsible person and, for cultivation, a master grower. One narrow exclusion applies: under section 19(4), the QAP duties do not apply to a reference standard or a test kit.

The QAP's Three Core Duties Under Section 19

Under section 19(2) of the Cannabis Regulations, the QAP has three duties: assure the quality of cannabis before it is made available for sale, investigate every complaint about product quality and act to mitigate risk, and investigate any suspected risk or failure to meet Part 5 or Part 6 requirements. Each duty must be supported by records an inspector can follow.

Assure quality before sale. Section 19(2)(a) makes the QAP responsible for assuring the quality of the cannabis before it is made available for sale. In practice this is the lot release decision.
Investigate complaints. Section 19(2)(b) requires the QAP to investigate every complaint received about the quality of the cannabis and, if necessary, to immediately take measures to mitigate any risk.
Act on suspected risk. Section 19(2)(c) requires the QAP, on reasonable grounds to suspect that the cannabis or an ingredient presents a risk, or that Part 5 or 6 is not being met, to immediately investigate and, if necessary, mitigate the risk.

Duty under section 19	What it means in practice	Evidence an inspector expects
Assure quality before sale (19(2)(a))	Review and approve each lot against its specifications before release	Signed release records, specifications, certificates of analysis, complete batch records
Investigate complaints (19(2)(b))	Log, assess and investigate every quality complaint and mitigate risk when needed	Complaint register, investigation reports, risk assessments, links to any recall
Act on suspected risk (19(2)(c))	Investigate when product or an ingredient may pose a risk, or Part 5 or 6 may not be met	Deviation and investigation files, CAPA records, quarantine and hold logs

QAP Authority: The Power to Hold Product

The QAP's authority is the power to withhold release. Because no cannabis can be made available for sale until the QAP has assured its quality, the QAP can place a lot on hold, reject it, or stop a shipment. This authority only works when the quality unit is independent of production and sales pressure, and when the authority is written plainly into the company's standard operating procedures.

Two provisions support continuity. Section 19(3) lets the licence holder designate one or more alternate quality assurance persons who are qualified to replace the QAP, so release is never blocked by one person's absence. Section 19(1.1) addresses edible cannabis: if the QAP does not have the training, experience, and technical knowledge specific to edibles, the licence holder must retain another individual who does. A release decision that is overturned by management, or signed by someone without the authority to do so, is one of the clearest ways to turn a quality problem into a compliance finding. Our analysis of why CAPA keeps failing shows how weak release and investigation controls repeat in inspection after inspection.

What Changed Around the QAP on 1 October 2026

Section 19 itself was not amended on 1 October 2026. What changed is the regulatory environment the QAP must assure. SOR/2025-244 harmonized the Cannabis Regulations with the new Controlled Substances Regulations, and the Controlled Substances Regulations came into force the same day. For a full list of the harmonization changes, see our breakdown of every Cannabis Regulations change in force 1 October 2026.

Three shifts matter most to the quality unit. First, personnel standards were tightened: the master grower, the responsible person, and the qualified person in charge must now have sufficient knowledge of the Act and Regulations acquired from a combination of education, training, and work experience. Second, record retention rules were updated, including a two year retention period for certain licensed dealer records. Third, destruction controls changed, with revised rules on who may witness destruction and a requirement for attestations signed by two witnesses. Terminology also shifted across the regulations, with declaration and statement becoming attestation, and professional licensing authority becoming professional regulatory authority.

Change	Source	What the QAP should check
Named personnel must have sufficient knowledge from education, training and experience	SOR/2025-244 (ss. 4, 5, 7, 150)	Training files and competency evidence for named personnel are current and defensible
Tighter record retention, including a two year period for certain dealer records	SOR/2025-244 (s. 195.3)	Retention schedules in SOPs match the new periods
Destruction must be witnessed and attested by two witnesses	SOR/2025-244 (s. 10)	Destruction SOPs and attestation templates are updated
New Controlled Substances Regulations in force	SOR/2025-242	Any dealer's licence activities are mapped to the new regime

These changes arrive alongside a stricter enforcement posture. Health Canada's updated enforcement policy is already in force, as we explain in our review of what POL-0001 version 10 changes for every licence holder. The practical message for a QAP is simple: the bar for defensible records and current training did not fall on 1 October 2026, it rose.

Qualifications: Who Can Be a QAP?

A QAP must have the training, experience, and technical knowledge needed to apply Parts 5 and 6 of the Cannabis Regulations to the class of cannabis the licence covers. There is no single mandated credential, so a licence holder must be able to defend the appointment with evidence. For edible cannabis, if the QAP lacks the specific knowledge, the licence holder must retain another individual who has it.

There is one more non negotiable qualification. The processing QAP must hold a security clearance under paragraph 50(h) of the Cannabis Regulations, and an alternate QAP must hold one too. A quality background, hands on experience with good production practices, and, for edibles, food safety knowledge are the practical building blocks. Documentation skill matters as much as technical depth, because almost every QAP duty is proven on paper. Our checklist of the 10 SOPs every licensed facility gets wrong is a useful self test for any quality unit.

Inspection Findings That Keep Landing on the QAP

Health Canada's compliance and enforcement report for 2025 to 2026 recorded 902 inspections and 29 non-compliant inspection reports issued to licence holders. The report gives three example observations rather than a ranked list, and all three fall inside the QAP's remit: cannabis inspection data summary, 2025 to 2026.

Not conducting activities as per their responsibilities.
Non-compliances related to good production practices.
Unsatisfactory retention of documents and information.

Read against section 19, the pattern is clear. Activities not conducted as per responsibilities points to unclear or unfollowed quality roles. Good production practice findings point to Part 5, which the QAP must assure. Document retention findings point to the records that prove every release and investigation. For the full picture of the sector's repeating findings, see our analysis of Health Canada's 2025 to 2026 cannabis inspection results. A related packaging risk, where a lot passes lab testing but fails on net content or count, is covered in our piece on cannabis pre-roll net content and count errors.

Cannabis QAP Compliance Checklist

Use this as a fast self assessment of the quality unit before your next Health Canada inspection.

A QAP is named in writing for every processing licence, with the appointment and qualifications on file.
At least one alternate QAP is designated and qualified under section 19(3).
The QAP and alternate hold valid Health Canada security clearances.
Lot release SOPs give the QAP clear authority to approve, hold, or reject, independent of sales and production.
Specifications exist for every product and are the basis for the release decision.
A complaint register captures every quality complaint, with investigations and risk assessments linked.
Deviation, investigation, and CAPA procedures connect to the QAP's section 19(2)(c) duty.
Record retention schedules match the updated 2026 periods, including the two year dealer record rule.
Destruction records use the updated two witness attestation format.
Training files for all named personnel show current, defensible competency.

Common Mistakes Licence Holders Make

Most QAP related findings are not exotic. They are the same avoidable gaps appearing in facility after facility.

Treating the QAP as a signature, not a function. Release is signed without a documented review against specifications.
No qualified alternate. Release stalls or, worse, is signed by someone not designated under section 19(3).
Weak complaint intake. Complaints are handled informally and never reach the QAP, breaching section 19(2)(b).
Stale training files. Competency evidence does not reflect the 2026 sufficient knowledge standard.
Retention schedules left at the old periods. SOPs are not updated to the current retention rules, producing document retention findings.

Frequently Asked Questions

What does a QAP do for a Canadian cannabis licence holder?

A QAP assures the quality of cannabis before it is made available for sale, investigates every quality complaint, and investigates any suspected risk or failure to meet Part 5 or Part 6 of the Cannabis Regulations. The duties are set out in section 19.

Which licence holders must appoint a QAP?

Section 19(1) requires a QAP for holders of a processing licence. Cultivation only licences, nurseries, analytical testing, and research licences do not carry the same section 19 QAP obligation, although they must still meet good production practices and appoint other named personnel.

Does a cannabis QAP need a security clearance?

Yes. Under paragraph 50(h) of the Cannabis Regulations, the quality assurance person for a processing licence must hold a security clearance, and any alternate QAP must hold one as well.

Did the QAP rules change on 1 October 2026?

Section 19 itself was not amended. The 1 October 2026 amendments under SOR/2025-244 tightened the surrounding obligations the QAP must assure, including personnel knowledge standards, record retention, and destruction controls, and the new Controlled Substances Regulations came into force the same day.

Can one person be the QAP for more than one duty or site?

A licence holder must retain one individual as the QAP for a processing licence and may designate qualified alternates. Each licence and site must be able to show that the named QAP has the training, experience, and technical knowledge for the class of cannabis involved.

What qualifications does a QAP need?

The QAP must have the training, experience, and technical knowledge to apply Parts 5 and 6 to the relevant class of cannabis. There is no single mandated credential, but the appointment must be defensible with evidence, and for edibles the QAP needs the specific knowledge or the holder must retain someone who has it.

How MFLRC Can Help

MFLRC provides QAP services and independent quality support for cannabis licence holders. We act as or support your quality assurance person, run mock audits and gap assessments, build and remediate SOPs and quality management systems, and prepare quality units for Health Canada inspection. Our cannabis and hemp regulatory support is led by a Health Canada security cleared, approved QAP with more than twenty years in quality assurance and regulatory affairs.

Book a QAP Gap Assessment

Conclusion

The cannabis QAP is not a formality. It is a named, legally responsible role that decides whether a product reaches the public, and it is the role Health Canada's inspection findings keep circling back to. Section 19 did not change on 1 October 2026, but the obligations around it tightened and enforcement sharpened. Licence holders that treat the QAP as a real quality function, with clear authority, a qualified alternate, current training, and defensible records, are the ones that pass inspection without drama. Those that treat it as a signature are the ones writing CAPA responses.