How to Write SOPs That Pass a Health Canada Inspection

A standard operating procedure (SOP) is the single most inspected document in any Health Canada regulated facility. When an inspector walks through your door, they do not start by watching your staff work. They start by reading what you said your staff would do, then they check whether reality matches the paper. That gap between the written word and the daily practice is where most observations are written.

If your SOPs are vague, out of date, unsigned, or impossible to follow, even a well run operation can fail. If your SOPs are clear, current, and genuinely used on the floor, even a young company can pass with confidence. Good SOPs are not paperwork for its own sake. They are the operating system of a compliant business.

This guide explains how to write SOPs that hold up under a Health Canada inspection across every regulated sector MFLRC supports, including cannabis, pharmaceuticals, natural health products, medical devices, and food. It covers the regulatory basis for SOPs, the anatomy of a defensible procedure, the documentation principles inspectors apply, the most common findings, and a ready to use compliance checklist.

Executive Summary

Health Canada does not regulate intentions. It regulates evidence. Across the Cannabis Regulations, the Food and Drug Regulations, the Natural Health Products Regulations, the Medical Devices Regulations, and the Safe Food for Canadians Regulations, the law requires regulated parties to conduct activities according to written standard operating procedures and to keep records proving those procedures were followed.

An SOP passes inspection when it is accurate, current, controlled, followed, and verifiable. It describes what actually happens, it carries a version and an approval, staff are trained on it, and the records it generates can be traced back to a real person, a real time, and a real result. The most common reasons SOPs fail are equally consistent: the procedure does not match practice, records are incomplete or backdated, the document is uncontrolled, or the SOP simply repeats the regulation without telling anyone how to do the task.

What Is a Health Canada SOP and Why Does It Matter?

A Health Canada SOP is a controlled written instruction that tells trained staff exactly how to perform a regulated activity in a consistent, compliant, and repeatable way. It is the bridge between a regulatory requirement and the action on your floor. Where the regulation says what outcome is required, the SOP says who does the task, how they do it, in what order, with what controls, and what record they create.

SOPs matter because Health Canada inspections are document led. Inspectors verify compliance by comparing your written procedures against your actual records and observed practice. When the three agree, you demonstrate control. When they diverge, you generate an observation. A strong SOP system also preserves knowledge when staff leave, shortens training, reduces variation and waste, and gives you a defensible position if a product is ever questioned or recalled.

The Regulatory Basis for SOPs by Sector

SOP obligations are not optional best practice. They are written into law and interpreted through Health Canada guidance. The exact wording differs by sector, but the expectation is the same: define your activities in writing, follow the writing, and keep the records.

For cannabis, the Good Production Practices Guide is explicit that cannabis and anything used as an ingredient must be produced, packaged, labelled, distributed, stored, sampled and tested in accordance with standard operating procedures, and that those SOPs must be designed to ensure activities meet Part 5 and Part 6 of the Cannabis Regulations. Health Canada also expects licence applications to include validated SOPs.

For drugs, GUI-0001 interprets the GMP requirements of Part C, Division 2 of the Food and Drug Regulations, covering quality management, facilities, equipment, personnel, sanitation, documentation, and testing. Since Canada is a member of the Pharmaceutical Inspection Co-operation Scheme (PIC/S), Canadian GMP inspections now align closely with European expectations, especially on data integrity and audit trails. Process and equipment validation records are read against the same documentation standard.

For natural health products, the finalized GUI-0158 Version 4.0 was published on 4 September 2025 and takes effect on 4 March 2026. It clarifies how Health Canada expects compliance with Part 3 of the Natural Health Products Regulations to be demonstrated, with expanded guidance on quality assurance systems, stability programs, recall and mock recall procedures, cleaning and sanitation, calibration, batch records, and electronic records and data integrity. Our deeper breakdown of what GUI-0158 Version 4.0 requires walks through the specific changes.

For medical devices, Class II, III and IV manufacturers operate under a quality management system certified to ISO 13485 through the Medical Device Single Audit Program, which is built on documented procedures and records. For food, the Safe Food for Canadians Regulations require a written Preventive Control Plan that includes a hazard analysis, control measures, critical control points, and written procedures for complaints and recalls, all verifiable by the Canadian Food Inspection Agency during inspection.

The Anatomy of an SOP That Passes Inspection

Inspectors are not looking for elegant prose. They are looking for a procedure that a trained person could pick up and follow without guessing, that controls the regulated risk, and that produces a record. A defensible SOP has a predictable structure.

1. A controlled header

Every page should identify the document. Include the title, a unique SOP number, the version or revision number, the effective date, the page number in an x of y format, and the name of the company or site. This is what lets an inspector confirm at a glance that staff are using the current version and not an old printout.

2. Purpose and scope

State in one or two plain sentences what the SOP is for and where it applies. Scope should name the activities, areas, products, or equipment covered, and call out anything deliberately excluded. A vague scope invites the question every inspector eventually asks: where is the procedure for the part you left out?

3. Responsibilities

Name the roles, not the people, who perform, verify, and approve each step. Tie these roles to your organisational chart and job descriptions. In regulated sectors with a named quality role, such as the Quality Assurance Person in cannabis and NHPs, the SOP should make that person's authority explicit.

4. Definitions and references

Define abbreviations and technical terms once, and reference the regulations, guidance documents, and related SOPs the procedure depends on. This shows the inspector that the SOP is anchored to a real requirement rather than written in isolation.

5. The procedure itself

This is the heart of the document. Write the steps in the exact order they happen, in short numbered instructions, using plain Canadian English and active verbs. Each step should describe a single action, the control or limit that applies, and where the result is recorded. If a step has a critical limit, a temperature, a time, a concentration, state it as a number, not as appropriate or as needed.

6. Records generated

List every form, logbook, label, or electronic entry the SOP creates, and reference them by number. An SOP that does not generate a record is usually an SOP that cannot be verified.

7. Revision history and approval

Show who wrote, reviewed, and approved the SOP, with dates and signatures, and keep a short revision history describing what changed and why. Approval before use is a basic GMP expectation. An unsigned SOP, or one used before its effective date, is an easy observation to write.

Good Documentation Practices: The ALCOA+ Standard

Writing the SOP is only half the job. The records your SOP produces are what an inspector actually reviews, and those records are judged against the data integrity principles known as ALCOA+. These principles originate in pharmaceutical GMP and data management guidance from bodies such as PIC/S and the World Health Organization, and they now shape inspector expectations across every regulated sector in Canada.

ALCOA+ means your records and the entries made under your SOPs should be:

• Attributable. Every entry can be traced to the person who made it, with a name or unique identifier and a date.
• Legible. Records are readable and permanent. Use indelible ink, never pencil, and never obscure an original entry.
• Contemporaneous. Entries are made at the time the activity is performed, not reconstructed hours or days later.
• Original. The first capture of the data, or a certified true copy, is retained.
• Accurate. The record reflects what actually happened, free from error or alteration.
• Complete. No data is deleted or omitted, including repeat tests and out of specification results.
• Consistent. Events are recorded in the true sequence in which they occurred.
• Enduring. Records are kept on durable media for the full required retention period.
• Available. Records can be retrieved promptly when an inspector asks for them.

Your SOPs should bake these principles in. When you design a form, leave a field for initials and date on every entry. When you write a correction rule, require a single line through the error, the correction beside it, and the initials and date of the person making the change. When you move to electronic records, your SOP must address audit trails, electronic signatures, and access control, all areas that GUI-0158 Version 4.0 and Canada's PIC/S aligned GMP expectations now scrutinise closely. A clean SOP that produces messy, backdated, or unsigned records will not protect you. Inspectors read the records first.

How to Write a Health Canada SOP, Step by Step

• Step 1: Map the real process. Walk the floor and watch the task being performed by the people who actually do it. Write down the true sequence, the equipment, the controls, and the decisions. Do not write the SOP from how the task is supposed to work in theory.
• Step 2: Identify the regulatory hooks. Note which regulation and guidance applies, for example a sanitation step under GPP for cannabis or a batch record step under GUI-0001 for drugs. The SOP must satisfy those requirements explicitly.
• Step 3: Draft in plain language. Write short, numbered, single action steps using active verbs. Aim for a reading level any trained operator can follow on a busy shift. State limits as numbers.
• Step 4: Build the record alongside the SOP. Design the form or logbook at the same time as the procedure so every recordable step has a place to be recorded, with fields for initials and date.
• Step 5: Review with the people who do the work and with quality. Operators catch the steps you missed. The quality function confirms the SOP meets the regulation and your quality system.
• Step 6: Approve before use. Have the authorised role, often the Quality Assurance Person or quality manager, sign and date the SOP and set an effective date. Do not use a draft on the floor.
• Step 7: Train and document the training. No one should perform a regulated task under an SOP they have not been trained on. Keep dated, signed training records, because inspectors routinely cross check them against who actually performed the work.
• Step 8: Control distribution. Make sure only the current version is in use, remove superseded copies, and keep the master under document control. Uncontrolled photocopies are a frequent source of findings.
• Step 9: Review on a schedule and after change. Set a periodic review cycle, often every one to two years, and review immediately whenever equipment, regulations, or processes change. Capture every change in the revision history.

Common SOP Mistakes That Trigger Inspection Findings

Health Canada's published cannabis compliance and enforcement reports show the same categories of deficiency year after year, including non-compliance with good production practices, inadequate record keeping, poor document retention, and not conducting activities in line with stated responsibilities. The same patterns appear in drug, NHP, device, and food inspections. Avoid these recurring mistakes.

• The SOP does not match practice. The document describes one process while staff perform another. This is the most damaging finding because it undermines the credibility of your entire system.
• The SOP just restates the regulation. Copying the regulatory text without explaining how to do the task gives staff nothing to follow and gives the inspector an easy gap to identify.
• Records are incomplete, late, or backdated. Missing initials, blank fields, entries written after the fact, or signatures that do not match the people on shift all breach ALCOA+ and are quickly spotted.
• The document is uncontrolled. No version number, no approval signature, multiple conflicting copies, or an old version still in use on the floor.
• Vague, unmeasurable instructions. Words like appropriate, as needed, and regularly instead of defined limits, frequencies, and acceptance criteria.
• No training evidence. Staff perform tasks under SOPs with no signed, dated training record to support them.
• Orphaned SOPs. Procedures that reference forms, equipment, or other SOPs that no longer exist, or that were never updated after a process change.
• No revision history. Changes made with no record of what changed, when, or why, which makes the document impossible to defend.

SOP Compliance Checklist

Use this checklist to assess each SOP before an inspection. If you cannot answer yes to every item, fix it now.

• The SOP has a unique number, current version, effective date, and page numbering.
• Purpose and scope are clear and complete, with exclusions stated.
• Responsibilities are assigned by role and match the organisational chart.
• The procedure reflects what actually happens on the floor.
• Steps are short, numbered, single action, and use defined limits and numbers.
• Every recordable step has a corresponding field on a controlled form.
• Records meet ALCOA+: attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, available.
• The SOP was approved and signed before its effective date.
• Training records exist, are signed and dated, and cover everyone who performs the task.
• Only the current version is in circulation, with superseded copies removed.
• A revision history records every change and the reason for it.
• The SOP references the correct regulation and Health Canada guidance.
• A periodic review date is set and the SOP is reviewed after any change.
• Related SOPs, forms, and equipment referenced in the document still exist and are current.

Frequently Asked Questions

What is an SOP in a Health Canada context?

An SOP is a controlled written instruction that describes exactly how to perform a regulated activity in a consistent and compliant way. Across cannabis, drug, natural health product, medical device, and food regulations, regulated parties must conduct activities according to written procedures and keep records showing the procedures were followed.

Does Health Canada approve my SOPs?

No. Health Canada does not pre-approve individual SOPs. Inspectors verify that your SOPs exist, meet the applicable regulation and guidance, reflect actual practice, and are supported by complete records. For some licences, such as cannabis, validated SOPs are expected as part of the application.

How often should SOPs be reviewed?

Set a periodic review cycle, commonly every one to two years, and review immediately whenever a process, piece of equipment, or regulation changes. Record each review and change in the revision history.

What is the most common SOP related inspection finding?

A mismatch between the written SOP and actual practice, combined with incomplete or untimely records. Health Canada's cannabis enforcement reports repeatedly cite good production practice non-compliance, inadequate record keeping, and poor document retention.

What does ALCOA+ mean for my records?

ALCOA+ is the data integrity standard that records must be attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, and available. Your SOPs should be designed so that the records they generate meet every one of these attributes.

Do small companies and start-ups need the same SOP rigour?

Yes. The regulatory obligation to operate under written procedures does not scale with company size. A start-up can pass inspection with a lean, well controlled SOP set, while a large company can fail with a bloated, out of date one. What matters is control, not volume.

Are electronic SOPs and records acceptable?

Yes, when they are managed under a validated system with audit trails, access controls, and electronic signatures. GUI-0158 Version 4.0 and Canada's PIC/S aligned GMP expectations place particular emphasis on electronic record controls and data integrity.

How MFLRC Can Help

Writing SOPs that pass a Health Canada inspection takes regulatory knowledge, sector experience, and an honest view of how your operation actually runs. MFLRC brings more than twenty years of quality assurance and regulatory affairs experience across cannabis, pharmaceuticals, natural health products, medical devices, food, and adjacent sectors. We help regulated businesses:

• Develop and rewrite SOPs that are clear, current, and tied to the correct regulation and Health Canada guidance, for any licence type.
• Build complete quality management systems, including SOP architecture, controlled forms, and document control processes that keep your master documents and revisions in order.
• Run gap assessments and mock inspections that compare your SOPs, records, and floor practice the same way an inspector would, so findings are caught and corrected before Health Canada arrives.
• Provide Quality Assurance Person (QAP) services and quality oversight for cannabis and natural health product sites.
• Prepare and remediate after inspections, including corrective and preventive action (CAPA) plans that respond to observations in a defensible way.
• Support licensing, validation, and audit readiness across the full regulatory lifecycle in Canada, the United States, and the European Union.

Our deliverables are practical and inspection ready, not generic templates. We write procedures your staff can actually follow and your inspectors can actually trust.

Conclusion

A Health Canada inspection is, at its core, a test of whether your business does what it says it does. SOPs are where you make that promise in writing, and records are how you prove you kept it. The companies that pass are not the ones with the thickest binders. They are the ones whose procedures are clear, current, controlled, genuinely followed, and backed by clean records that satisfy ALCOA+.

Start by walking your floor and writing down what really happens. Build each SOP around a single regulated activity, assign responsibilities by role, state your limits as numbers, design the record alongside the procedure, approve before use, train your people, and review on a schedule. Do that consistently across every licence type you hold, and an inspection becomes a confirmation of good practice rather than a source of anxiety. If you want a second set of expert eyes on your SOP system before your next inspection, MFLRC is ready to help.

Sources and References

• Health Canada, Good Production Practices Guide for Cannabis
• Health Canada, Good Manufacturing Practices Guide for Drug Products (GUI-0001)
• Health Canada, GMP Guide for Natural Health Products (GUI-0158) Version 4.0 Notice
• CFIA, Regulatory requirements: Preventive control plan for food businesses
• Health Canada, Cannabis inspection data summary, compliance and enforcement reports
• WHO, TRS 996 Annex 5, good data and record management practices
• ISO 13485, Medical devices quality management systems