NHP GMP Guide GUI-0158 Version 4.0 Is Now in Force: A Compliance Checklist for Canadian Licence Holders

Executive Summary

On September 4, 2025, Health Canada published Version 4.0 of GUI-0158, the first major rewrite of the Natural Health Product GMP guidance since 2015. The 165-page document interprets Part 3 of the Natural Health Products Regulations and applies across the full supply chain, including manufacturing, packaging, labelling, importing, distributing, storing, and testing.

The transition window closed on March 4, 2026. Version 3.0 is withdrawn, and Version 4.0 is now the sole reference Health Canada inspectors use to assess compliance. The guidance does not change the legal obligations in the Regulations, but it sharpens how those obligations must be met, documented, and defended.

For licence holders, the practical message is clear. A quality system that passed an inspection in 2023 may now show gaps against Version 4.0 expectations for a documented quality manual, real-time stability data, batch-level QAP release, supplier qualification, importer testing, CAPA, and data integrity. This article explains what changed, who is accountable, and exactly what to verify, and it closes with a 15-point checklist and FAQ you can act on this quarter.

What Is GUI-0158 Version 4.0?

GUI-0158 is Health Canada's official interpretation of the GMP requirements set out in Part 3 of the Natural Health Products Regulations (SOR/2003-196). It tells industry how the regulator expects each GMP requirement to be implemented and evidenced during a site licence application, renewal, or inspection.

Why it matters: Version 4.0 reorganizes the guidance to follow the order of the Regulations and expands almost every section. It is longer, more prescriptive, and more closely aligned with international quality-system principles such as ICH Q9 risk management than the 2015 version. Inspectors now have a clearer benchmark, which means inconsistent or undocumented practices are easier to cite.

What companies should do: Treat Version 4.0 as a new baseline rather than a refresh. Read it against your current quality manual and standard operating procedures, and map each clause to an owner, a procedure, and a record.

How it affects compliance: Because the guidance is the document inspectors reference, conformance is no longer aspirational. Demonstrable, record-backed conformance is the expectation from the day it came into force.

Who Must Comply

Version 4.0 applies to every party that performs a GMP-related activity with a natural health product sold in Canada:

Manufacturers of non-sterile and sterile NHPs, including vitamins, minerals, herbal remedies, probiotics, amino acids, traditional medicines, and certain personal care products such as toothpastes, antiperspirants, and mouthwashes.
Packagers and labellers responsible for primary and secondary operations.
Importers bringing finished or bulk NHPs into Canada.
Distributors and storage operators, including warehouse and e-commerce fulfilment operations.

A significant clarification in Version 4.0 is that distribution and storage, while not licensable activities under Part 2 of the Regulations, must still follow GMP when carried out by importers, warehouse operators, or online distributors. Companies that previously assumed warehousing sat outside GMP need to revisit that assumption now.

The Major Changes in Version 4.0

1. A Documented Quality System Led from the Top

Version 4.0 expects a formal, company-wide quality system anchored by a written quality manual that defines management roles, responsibilities, and accountability. Senior or executive management must be actively involved, with documented evidence that leadership reviews quality performance and provides adequate resources. Many small and medium NHP companies operate without a consolidated quality manual or a defined management-review cadence. Both are now expected.

2. A Stronger, Batch-Level QAP Role

The Quality Assurance Person must review and approve every batch of NHPs before release. The QAP role moves from general oversight to documented, batch-by-batch accountability for release decisions, deviations, and disposition. Senior management must give the QAP the authority and independence to hold or reject product.

3. Finished Product Testing as a Release Requirement

Finished product testing is positioned as an integral element of product release rather than an optional check. Specifications must be defined, justified, and met before a lot is released, and the supporting test data must be retained.

4. Detailed Stability Requirements

Stability is among the most strengthened areas. Version 4.0 expects real-time stability studies to support expiry dating. Accelerated stability data may still be used to establish a preliminary shelf life, but at least one commercial batch must be placed on real-time stability to confirm the product maintains its quality through the labelled shelf life. Expiry dates that are not supported by a defensible stability program are an inspection risk.

5. Expanded Requirements for Importers

Importers face broader expectations for testing, documentation, and control of labels. An importer must be able to demonstrate that imported product meets its specifications and that the foreign site operates to a standard equivalent to Canadian GMP, supported by quality agreements and evidence of supplier oversight.

6. Broader Record-Keeping and Traceability

Record-keeping obligations now extend across manufacturers, packagers, labellers, importers, and distributors to ensure full traceability across the product lifecycle. This includes batch records, importer documentation, distributor records, and recall reporting.

7. Formal CAPA and Risk Classification

Version 4.0 expands guidance on the Corrective and Preventive Action process and on risk classification, encouraging science-based quality risk management tools consistent with ICH Q9. CAPA must be documented, risk-rated, and closed with evidence of effectiveness.

8. Recall Readiness, Including Mock Recalls

Recall systems are addressed in more detail, including the expectation that companies test their recall procedures through mock recalls so that traceability and timelines are proven before a real event.

9. Data Integrity and Electronic Records

Version 4.0 adds expectations for electronic signatures, electronic records, and data integrity. Records must be attributable, legible, contemporaneous, original, and accurate, whether kept on paper or in a computerized system.

10. A Supplementary Section for Homeopathic Medicines

The guide includes a dedicated supplementary section addressing GMP requirements specific to homeopathic medicines.

QAP and Senior Management Responsibility Matrix

Use this matrix to confirm each duty has a named owner at your site.

Responsibility	Senior / Executive Management	Quality Assurance Person (QAP)	Operations / Production
Establish and resource the quality system	Accountable	Advises and maintains	Supports
Approve the quality manual and policies	Accountable	Drafts and maintains	Input
Batch review and release decision	Provides authority	Accountable	Provides records
Specifications and finished product testing	Oversight	Approves and verifies	Executes testing
Stability program design and review	Resources	Accountable for review	Executes studies
Supplier qualification and quality agreements	Approves	Accountable	Technical input
Deviation, CAPA, and risk classification	Reviews effectiveness	Accountable	Initiates and implements
Recall and mock recall readiness	Accountable for decision	Coordinates and tests	Supports traceability
Data integrity and records control	Resources systems	Accountable for oversight	Maintains records
Management review of quality performance	Accountable	Presents data	Input

The 15-Point GUI-0158 Version 4.0 Compliance Checklist

Work through these items against your current quality system. Each one maps to an expectation strengthened or added in Version 4.0.

Quality manual is written, current, approved, and defines roles, responsibilities, and accountabilities.
Senior management involvement is documented through a defined management-review cadence with records of decisions and resourcing.
QAP authority is formally assigned, with independence to hold or reject product clearly stated.
Batch release records show QAP review and approval for every lot before release.
Specifications for raw materials, in-process, and finished products are defined, justified, and met.
Finished product testing is performed and retained as part of release, not treated as optional.
Stability program uses real-time data to support expiry dates, with at least one commercial batch on real-time study.
Supplier qualification program is in place, with quality agreements and ongoing monitoring.
Importer controls demonstrate testing, documentation, and label control for imported product.
Distribution and storage operations follow GMP, including temperature control and traceability.
Record-keeping ensures end-to-end traceability across manufacturing, packaging, labelling, import, and distribution.
CAPA system is documented, risk-rated, and closed with effectiveness checks, consistent with ICH Q9.
Recall procedure is tested through a mock recall, with documented timelines and reconciliation.
Data integrity controls cover electronic signatures, records, audit trails, and backup.
Training records show staff are trained to current procedures aligned with Version 4.0.

Common Mistakes Inspectors Are Likely to Find

Treating Version 4.0 as a relabel. The reorganized structure hides substantive new expectations, so a clause-by-clause gap assessment is the only reliable way to find them.
No consolidated quality manual. Scattered SOPs without an overarching quality manual no longer meet the expectation for a defined quality system.
Expiry dates without real-time stability. Relying solely on accelerated data, or on supplier claims, leaves expiry dating unsupported.
QAP release that is not batch-specific. General quality sign-off does not satisfy the expectation for documented batch-by-batch release.
Importers assuming the foreign site covers GMP. Importers carry independent responsibility for testing, documentation, and label control.
Warehousing treated as out of scope. Distribution and storage must follow GMP even though they are not licensable activities.
CAPA without effectiveness verification. Open or unverified CAPAs are a recurring inspection finding.
Untested recall procedures. A written procedure with no mock recall provides no evidence it works.
Weak data integrity controls. Missing audit trails or uncontrolled spreadsheets undermine the reliability of records.

How MFLRC Can Help

MF License & Regulatory Consultants (MFLRC) is a Toronto-based regulatory firm led by Mussarat Fatima, a QAP with more than 20 years of quality assurance, quality control, and regulatory experience across pharmaceuticals, natural health products, food, and cannabis. We help NHP licence holders and importers move from uncertainty to a defensible, inspection-ready quality system under Version 4.0.

Our support includes a GUI-0158 gap assessment, quality manual and QMS build, QAP services, supplier qualification, and stability program design. Explore our Natural Health Products regulatory services to see how we structure this work, and review our guidance on acing a Health Canada audit and passing a regulatory audit.

We also support related programs, including Good Production Practices for cannabis, cannabis QA compliance, and food safety and HACCP, which share the same quality-system foundations.

Book a GUI-0158 Gap Assessment

Frequently Asked Questions

When did GUI-0158 Version 4.0 come into force?

Version 4.0 came into force on March 4, 2026. Health Canada published it on September 4, 2025, with a six-month transition during which Version 3.0 remained valid. Version 3.0 is now withdrawn.

Does Version 4.0 change the law for natural health products?

No. Version 4.0 is guidance that interprets Part 3 of the Natural Health Products Regulations. It does not change the legal obligations, but it clarifies and strengthens how Health Canada expects them to be demonstrated.

Who has to comply with GUI-0158 Version 4.0?

Every party performing a GMP activity for an NHP sold in Canada, including manufacturers, packagers, labellers, importers, distributors, and storage operators.

What are the biggest changes for NHP companies?

A documented quality manual with senior management accountability, batch-level QAP release, real-time stability data to support expiry dates, expanded importer controls, broader record-keeping, formal CAPA and risk classification, mock recalls, and data integrity expectations.

Do importers have new responsibilities under Version 4.0?

Yes. Importers must demonstrate testing, documentation, and label control, and show that the foreign manufacturing site operates to a standard equivalent to Canadian GMP, supported by quality agreements.

Is real-time stability testing now mandatory for NHPs?

Real-time stability data is expected to support expiry dating. Accelerated data can establish a preliminary shelf life, but at least one commercial batch must be placed on real-time stability to confirm the labelled shelf life.

What is the fastest way to prepare?

Start with a clause-by-clause gap assessment against Version 4.0, then prioritize the quality manual, QAP release process, stability program, and supplier qualification. MFLRC can run this assessment and deliver a remediation roadmap.

Conclusion

GUI-0158 Version 4.0 is no longer on the horizon. It is the standard against which Health Canada assesses every NHP site licence holder and importer today. The guidance does not rewrite the law, but it raises the evidentiary bar across quality systems, stability, records, supplier oversight, and accountability. Companies that pass inspection will be the ones that can show, on paper and in their data, that each requirement is owned, executed, and verified.

The most reliable path forward is a structured gap assessment followed by focused remediation of the quality manual, QAP release process, stability program, and supplier controls. With the right plan, conformance becomes a foundation for sustainable market access rather than a scramble before the next inspection.

Sources and References

Health Canada, Good manufacturing practices guide for natural health products (GUI-0158).

Health Canada, GUI-0158: Risk classification, CAPA process.

Justice Canada, Natural Health Products Regulations (SOR/2003-196).

ICH, Q9 Quality Risk Management.