How Canadian Cannabis Producers Win the German Market: A 2026 EU-GMP and GACP Certification Roadmap

Introduction

Canada has quietly become Germany's most important supplier of medical cannabis. In the first quarter of 2026, Germany imported 50,539 kg of cannabis flower for medical and scientific use, and Canadian producers supplied 26,753 kg of that total, roughly 53 percent of the market. No other country came close.

That single statistic should reframe how every Canadian licensed producer thinks about growth. Germany is now the largest medical cannabis market in the world outside North America, and it rewards one thing above all others: pharmaceutical-grade quality backed by the right certifications. The producers winning German shelf space are not necessarily the largest or the cheapest. They are the ones that hold European Union Good Manufacturing Practice (EU-GMP) certification and can prove Good Agricultural and Collection Practice (GACP) compliance at the cultivation level.

This guide lays out a practical, regulation-backed roadmap for getting there. It explains what EU-GMP and GACP actually require, how a Canadian site earns certification through an overseas inspection, how long the process takes, and where producers most often stumble. If you are planning to export to Germany or the wider EU, this is the compliance groundwork that determines whether you reach the pharmacy channel or stay locked out of the highest-value part of the market.

Executive Summary

Germany reclassified medical cannabis as a normal prescription medicine in April 2024, and demand has surged ever since. The country imported more than 200 tonnes in 2025 and raised its import ceiling to roughly 192.5 tonnes after the previous quota was exhausted. Patient numbers reached an estimated 900,000 by mid-2025.

For Canadian producers, the opportunity is real but conditional. To sell into German pharmacies, the finished medicinal product must come from an EU-GMP-certified manufacturing operation, and the cannabis must be cultivated under GACP. A Canadian site secures EU-GMP certification either by undergoing an overseas inspection from an EU member state authority, such as Germany's BfArM, Portugal's Infarmed, or Denmark's DKMA, or by shipping GACP-grade material to a licensed EU site that performs the final GMP-controlled steps and batch release.

The process is demanding. Inspection timelines of 12 to 24 months from application to approval are common, and the quality system must satisfy EudraLex requirements that go well beyond Canada's Good Production Practices. This roadmap breaks the journey into five phases: readiness assessment, GACP build, EU-GMP quality system development, inspection preparation, and post-certification maintenance. Producers who treat certification as a structured project, rather than a last-minute scramble before an inspection window, are the ones that pass.

Why Germany Matters More Than Ever in 2026

Direct answer: Germany matters because it is the largest and fastest-growing import market for medical cannabis in the world, and Canadian producers currently hold the leading supplier position. Protecting and expanding that position depends on EU-GMP and GACP certification.

When Germany's Medical Cannabis Act (Medizinal-Cannabisgesetz, or MedCanG) took effect on 1 April 2024, it removed cannabis from the country's Narcotics Act and reclassified it as a prescription-only medicine. The practical effect was enormous. Doctors no longer needed a special narcotic prescription form, pharmacies could dispense more easily, and telemedicine platforms scaled patient access rapidly.

The numbers tell the story. Germany imported over 200 tonnes of medical cannabis in 2025, up sharply from prior years. When the original 122-tonne demand estimate was exhausted, the Federal Institute for Drugs and Medical Devices (BfArM) raised the ceiling by roughly 70 tonnes to about 192.5 tonnes. In Q1 2026 alone, imports reached 50,539 kg, up about 34 percent year over year.

Canada's position in this market is strong but not guaranteed. The 53 percent supplier share reflects years of investment in EU-GMP certification by a subset of Canadian producers. Portugal, the second-largest supplier at 10,342 kg in Q1 2026, is an EU member state with a structural inspection advantage. Producers in Australia, Colombia, and Uruguay are also competing for the same pharmacy channel. The Canadian lead is a head start, not a moat, and it belongs to certified sites.

EU-GMP and GACP: What They Are and Why Both Are Required

Direct answer: GACP governs how cannabis is grown and harvested, while EU-GMP governs how it is processed, tested, packaged, and released as a finished medicine. German pharmacy access requires both, applied in sequence across the supply chain.

Many producers treat EU-GMP and GACP as interchangeable quality badges. They are not. They cover different stages of the supply chain, and the boundary between them is defined in EudraLex Volume 4, Annex 7 (Manufacture of Herbal Medicinal Products).

GACP, Good Agricultural and Collection Practice, is the cultivation and primary-processing standard. It governs growing conditions, water and soil management, pest control, harvest timing, drying, and the early handling steps that determine the quality and consistency of the herbal starting material. The European Medicines Agency adopted a revised GACP guideline in 2025 (Revision 1), updating a document that had stood largely unchanged since 2006. The revision reflects the rise of indoor cultivation and introduces clearer expectations for controlled-environment growing, which is directly relevant to Canadian indoor and greenhouse operations.

EU-GMP, European Good Manufacturing Practice, is the pharmaceutical manufacturing standard. It governs extraction, formulation, milling, packaging, analytical testing, documentation, and the release of each batch by a Qualified Person. EU-GMP is stricter as the product moves closer to its final medicinal form. The general principle in Annex 7 is straightforward: the closer a step is to the finished medicine, the more GMP control it requires.

The two standards work together. A batch of German-bound medical cannabis flower is typically grown and dried under GACP, then moved into a GMP-certified environment for any further processing, quality control testing, packaging, and Qualified Person batch certification. A break or weakness at either stage can disqualify the product from the pharmacy channel.

GACP vs EU-GMP at a Glance

How a Canadian Site Earns EU-GMP Certification

Direct answer: A Canadian producer obtains EU-GMP certification either by hosting an overseas inspection from an EU member state authority or by partnering with a licensed EU manufacturing site that performs the final GMP steps and releases the product.

There is no single global EU-GMP certificate that a producer can simply apply for. Certification is granted by individual EU national competent authorities, and a third-country site such as a Canadian facility has two practical routes.

The first route is a direct overseas inspection. A Canadian site applies through an EU member state authority that is willing to inspect facilities outside the EU. BfArM in Germany, Infarmed in Portugal, and the Danish Medicines Agency (DKMA) have all conducted international EU-GMP inspections of cannabis facilities. The authority sends inspectors to audit the site against EudraLex requirements. If the site passes, it receives an EU-GMP certificate covering the specific activities and dosage forms inspected.

The second route is partnership with an EU-based importer or manufacturer. Under this model, the Canadian site cultivates and processes cannabis to GACP standard, ships it to a licensed EU site, and that EU site performs the GMP-controlled finishing, testing, and Qualified Person release. This route can be faster to market because it leverages an existing EU certification, but it gives the Canadian producer less control over the finished product and the customer relationship, and it usually means a thinner margin.

Most producers building a long-term German strategy pursue direct certification, because it preserves margin, control, and brand. The trade-off is time and rigour. The remainder of this roadmap focuses on the direct route, since it is where MFLRC's clients see the greatest strategic payoff.

The Five-Phase EU-GMP and GACP Certification Roadmap

A certification project should be planned backward from your target inspection window. The five phases below give a realistic structure. Timelines vary by the maturity of your existing quality system, but 12 to 24 months from serious start to certificate is a reasonable planning assumption.

Phase 1: Readiness Assessment and Gap Analysis

Before committing capital, a producer needs an honest map of the distance between its current Health Canada Good Production Practices system and EU-GMP. A structured gap analysis compares facility design, documentation, quality control testing, stability data, contamination control, and personnel qualifications against EudraLex requirements. The output is a prioritized remediation plan with cost and time estimates. Skipping this step is the single most common reason projects stall, because producers discover late that a facility change or a stability programme they should have started a year earlier is now on the critical path.

Phase 2: GACP Implementation at Cultivation

GACP must be embedded in the growing operation, not bolted on. This phase covers controlled-environment documentation, water and input controls, pest-management records, harvest and drying SOPs, and the assignment of distinct batch numbers from the point of cultivation. The 2025 EMA revision's focus on indoor cultivation makes this phase more defined for Canadian operations than it once was. GACP records become the foundation of the traceability story that EU-GMP inspectors will follow.

Phase 3: EU-GMP Quality System Development

This is the heaviest phase. It builds the pharmaceutical quality system that EudraLex demands: a complete SOP architecture, validated processes and equipment, a cleaning validation programme, environmental monitoring, a deviation and CAPA system, change control, supplier qualification, data integrity controls, and a real-time stability programme that supports the shelf life you intend to claim. It also requires appointing or contracting a Qualified Person and defining how batches will be certified and released. Many Canadian sites underestimate how much documentation maturity EU-GMP expects compared with domestic GPP.

Phase 4: Inspection Readiness and the Inspection Itself

Once the system is built and operating, it must be tested under pressure. A mock inspection conducted by experienced auditors simulates the real thing, surfacing gaps in records, staff knowledge, and facility behaviour while there is still time to fix them. The producer then submits the formal application to the chosen EU authority and prepares the site, the team, and the documentation for the inspection. Findings are classified by severity, and the site must respond with a credible CAPA plan. A clean or well-remediated inspection results in the EU-GMP certificate.

Phase 5: Post-Certification Maintenance

Certification is not a finish line. EU-GMP status must be maintained through ongoing quality management, periodic self-inspections, product quality reviews, recertification inspections, and continuous CAPA discipline. German and EU authorities expect a living quality system, and a lapse can suspend market access just as surely as a failed initial inspection. Building maintenance into operating budgets from the start protects the investment.

Roadmap Timeline Summary

EU-GMP and GACP Compliance Checklist

Use this checklist as a high-level readiness screen. It is not a substitute for a full gap analysis, but it shows the breadth of what an inspection covers. You can also download the full EU-GMP and GACP Export Readiness Checklist as a free one-page PDF, using the download link in this article.

• Documented gap analysis comparing current GPP to EudraLex EU-GMP requirements
• GACP system in place across cultivation, harvest, and drying with distinct batch numbers
• Complete, version-controlled SOP architecture covering all GMP activities
• Process, equipment, and cleaning validation completed and documented
• Analytical methods validated and quality control testing capability in place
• Real-time stability programme supporting the intended shelf life, with at least one commercial-scale batch on study
• Environmental monitoring and contamination control programme operating
• Deviation, CAPA, and change-control systems active with records
• Data integrity controls for paper and electronic records
• Qualified Person appointed or contracted, with a defined batch certification process
• Supplier and material qualification programme
• Trained personnel with documented competency records
• Mock inspection completed and findings remediated
• Health Canada licensing and export permits in order for the cannabis being shipped

Common Mistakes That Cost Producers the German Market

Even well-funded Canadian producers fail EU-GMP inspections or miss their market window for predictable reasons. The most frequent are worth naming directly.

The first is running stability studies on the wrong batches. Real-time stability data must be generated on batches made under the compliant GACP and EU-GMP process, not on legacy Health Canada GPP product. Producers who rely on stability data from GPP-only batches find that it will not justify their shelf life for the German market, so the studies have to be repeated on representative EU-GMP batches, which adds months to the timeline.

The second is treating Health Canada GPP as close enough to EU-GMP. GPP is a solid foundation, but EudraLex demands deeper documentation, more validation, and a stronger Qualified Person and quality-oversight structure. Underestimating this gap leads to inspection findings that could have been prevented.

The third is weak data integrity. Inspectors scrutinize how records are created, changed, and stored. Incomplete audit trails, unsecured electronic records, and inconsistent paper documentation are common findings that signal a quality culture problem rather than a single error.

The fourth is skipping the mock inspection. The first time a team experiences inspection pressure should not be the real inspection. A mock audit by independent experts is the most reliable way to convert a fragile system into one that holds up.

The fifth is neglecting the GACP-to-GMP handoff. The transition from cultivation records to manufacturing batch records is exactly where traceability breaks. Inspectors follow a batch from seed to release, and a gap at the handover undermines the whole file.

Frequently Asked Questions

Do Canadian cannabis producers need EU-GMP certification to sell in Germany?

To reach the German pharmacy channel, the finished medicinal product must come from an EU-GMP-certified manufacturing operation, and the cannabis must be cultivated under GACP. A producer can either certify its own Canadian site through an overseas inspection or supply GACP material to a licensed EU site that performs the GMP finishing and release.

How long does EU-GMP certification take for a Canadian site?

Inspection timelines of 12 to 24 months from application to approval are common. The full project, including readiness work, quality system development, and stability data generation, can run longer if a producer starts from a standard Health Canada GPP baseline.

What is the difference between GACP and EU-GMP?

GACP covers cultivation, harvest, and primary handling of the cannabis as a herbal starting material. EU-GMP covers processing, testing, packaging, and batch release of the finished medicine. The boundary is defined in EudraLex Volume 4, Annex 7, and both standards are required for German market access.

Which EU authorities inspect overseas cannabis facilities?

Germany's BfArM, Portugal's Infarmed, and Denmark's DKMA have all conducted international EU-GMP inspections. A Canadian producer applies through one of these or another willing EU member state authority for a direct overseas inspection.

Is Health Canada licensing enough to export to Germany?

No. Health Canada licensing under the Cannabis Act and Cannabis Regulations, along with the required export permits, is necessary to legally ship cannabis out of Canada, but it does not satisfy EU requirements. EU-GMP and GACP sit on top of the Canadian framework and are what unlock the German pharmacy channel.

Did the EMA change the GACP rules recently?

Yes. The European Medicines Agency adopted a revised GACP guideline (Revision 1) in 2025, updating guidance that had been in place since 2006. The revision adds clearer expectations for indoor and controlled-environment cultivation, which is directly relevant to many Canadian operations.

How MFLRC Can Help

MFLRC is a Canadian regulatory and quality consultancy with deep, hands-on experience in cannabis licensing, quality systems, and overseas export compliance. We help Canadian producers move from a domestic Good Production Practices baseline to full EU-GMP and GACP readiness for German and wider EU export.

Our support across the certification roadmap includes:

• EU-GMP readiness assessments and gap analyses that map the precise distance between your current system and EudraLex requirements, with a costed remediation plan.
• GACP compliance build for cultivation, harvest, and drying, aligned to the 2025 EMA revision and built for traceability into your manufacturing records.
• Quality system and SOP development, including validation, stability planning, deviation and CAPA systems, and data integrity controls.
• Qualified Person and quality-oversight structuring so batch certification and release meet EU expectations.
• Overseas inspection preparation, including mock audits and inspection-readiness assessments that test your system before the real inspection.
• Process and equipment validation support to satisfy GMP requirements.
• Import and export compliance spanning Health Canada permits and EU market entry, drawing on our work across cannabis and hemp and other regulated markets.

Whether you are exploring your first overseas inspection or strengthening an existing EU-GMP file, we provide practical, senior-led guidance built on real regulatory experience, not generic checklists.

Planning to export to Germany or the EU? Book an EU-GMP readiness assessment with MFLRC to map your certification pathway before your next inspection window.

Conclusion

Germany has become the proving ground for Canadian cannabis on the world stage. Supplying 53 percent of a 50,539 kg quarter is a remarkable achievement, but it rests entirely on certification. The producers who hold EU-GMP and GACP credentials are inside the pharmacy channel, capturing the highest-value demand. The producers who do not are watching from the outside.

The encouraging news is that certification is a structured, achievable project. With a clear gap analysis, a disciplined quality system build, a real-time stability programme started early, and a properly rehearsed inspection, a Canadian site can earn EU-GMP certification and protect its place in the German market. The work is demanding, but the destination is the most lucrative cannabis export opportunity available to Canadian producers today.

The window is open now. German demand keeps rising, the import ceiling keeps climbing, and competition from EU member states and other third countries is intensifying. Producers who begin the certification journey today will be the ones holding German shelf space tomorrow.

Sources and References

• BfArM (Federal Institute for Drugs and Medical Devices), Germany
• European Medicines Agency, Good Agricultural and Collection Practice guideline
• European Commission, EudraLex Volume 4 (EU GMP guidelines, including Annex 7)
• Health Canada, Cannabis licensing and regulatory information
• Germany Medical Cannabis Act (MedCanG) overview, SKW Schwarz
• Q1 2026 German import data reporting, StratCann