NHP GMP Guide Version 4.0 (GUI-0158): What Natural Health Product Licence Holders Must Do Now

Two weeks before Health Canada’s new natural health product GMP guide came into force, I sat across from a long-time client who had just walked through their own facility with a fresh set of eyes. Their stability program was running. Their SOPs were in place. Their importer file looked organized on paper. And yet, after two hours, we had a list of fourteen things that would not hold up under a Version 4.0 inspection. None of them were new requirements. All of them were now expected to be evidenced — clearly, consistently and on demand.

If you hold a Site Licence for a natural health product (NHP) in Canada, the Good Manufacturing Practices Guide for Natural Health Products (GUI-0158), Version 4.0 came into force on March 4, 2026. It is now the lens through which Health Canada inspectors interpret Part 3 of the Natural Health Products Regulations. The legal foundation has not changed. What has changed is how compliance must be demonstrated — and the bar is materially higher than it was twelve months ago.

This article walks through what is actually different, where I am already seeing licence holders get caught off guard, and what a defensible 90-day response looks like.

At a glance — the three takeaways

Real-time stability data is now the baseline. Accelerated or matrixed studies alone will not support expiry dates. Every NHP needs a written protocol, an ongoing study, and a stability report on file.
Importer obligations have teeth. A foreign manufacturer’s GMP claim is no longer sufficient. Canadian importers must hold quality agreements, documented batch documentation review, and evidenced release decisions.
Quality systems are inspected as systems. Senior management accountability, CAPA effectiveness, recall preparedness, electronic records integrity — these are now assessed as one connected fabric, not isolated SOPs.

The headline facts

Before we get into the practical work, here are the dates and document references every NHP licence holder should have written down:

Document: Good Manufacturing Practices Guide for Natural Health Products
Reference number: GUI-0158
Version: 4.0 (165 pages)
Published by Health Canada: September 4, 2025
In force: March 4, 2026 (this is now the operative date — the six-month transition period has closed)
Underlying regulation: Part 3 of the Natural Health Products Regulations
Status: Guidance — it does not create new statutory obligations, but it is the interpretation Health Canada inspectors will use

The simplest way to think about Version 4.0 is this: the Regulations told you what the law expects. Version 4.0 tells you how Health Canada expects you to prove it.

Why this update was inevitable

Anyone who has read my earlier article on whether the NHP Regulations are still effective will know my view: the original framework was designed for a much smaller, simpler Canadian NHP market. We now have multinational supply chains, contract manufacturers in three or four jurisdictions per finished product, electronic batch records, and product portfolios that span vitamins, herbal preparations, homoeopathic medicines and combination products. The 2015 guide could no longer carry that weight.

Version 4.0 is Health Canada’s response. It does not introduce a new compliance regime. It modernizes the inspection lens — pulling NHP GMP expectations closer to the rigour you would see on the pharmaceutical side under GUI-0001, while keeping the framework anchored in the NHPR.

For most licence holders I work with, the gap is not catastrophic. The gap is that systems that worked under the older guidance — informal stability programs, light importer files, paper-driven CAPA logs — were never built to be evidenced under structured inspection. That is now what is being tested.

Six areas where the inspection lens has sharpened

Six Areas Where the Inspection Lens Has Sharpened

1. Quality management systems as a system

The most consequential shift in Version 4.0 is conceptual. NHP GMP is no longer treated as a checklist of procedural compliance. It is now framed as a company-wide Quality Management System (QMS) — embedded, monitored and continually improved.

What this means in practice:

Senior management is named explicitly as accountable for the effectiveness of the quality system.
“Documented” is not the same as “implemented”. Inspectors will look for evidence the SOP is actually used.
Continual improvement, training effectiveness, and quality culture are valid inspection topics — not optional extras.

I tell every NHP client the same thing: if your QMS lives in a binder that no one has opened since the last inspection, that is now an inspection risk in itself.

2. Stability — real-time data is the standard

This is the change with the most immediate operational impact. Version 4.0 is unambiguous: every NHP must have a completed real-time stability study, a written protocol, and a stability report. Accelerated data, read-across from similar products, or supplier-provided summaries are not on their own sufficient to support a shelf-life claim.

A defensible stability program under Version 4.0 includes:

A risk-based stability protocol per product family
Defined storage conditions aligned with ICH Q1A(R2) climatic zones relevant to Canadian distribution
Specified test parameters, sampling intervals and acceptance criteria
Ongoing stability studies on commercial batches, not only development batches
Trending and out-of-trend handling procedures
Scientific justification for expiry dates, not historic precedent

If your current stability strategy was inherited from the supplier and never validated, that is the single biggest exposure I would address this quarter. Our pharmaceutical validation services team builds stability strategies of this depth routinely; the approach for NHPs is now converging with that standard.

3. The Quality Assurance Person — and the people above the QAP

Every NHP manufacturer, packager, labeller, importer and distributor must designate a Quality Assurance Person (QAP). Version 4.0 sharpens that role considerably. The QAP must have clear written authority to approve, reject and recall product. Their reporting line, qualifications and training must be documented.

What is genuinely new is the explicit framing of senior management accountability. Health Canada is signalling that quality oversight cannot be delegated downward and forgotten. Senior management is expected to:

Hold and document formal management reviews of the QMS
Provide adequate resources, training and infrastructure
Sign off on quality policy, objectives and KPIs
Be available during inspection and able to speak to quality performance

If your last management review was an email thread, that will not survive an inspection under Version 4.0.

4. Deviations, CAPA and recall preparedness

Version 4.0 expands the guidance on how organizations should manage deviations, out-of-specification (OOS) results and Corrective and Preventive Actions (CAPA). The legal obligation has not changed. The expectation that the system be demonstrably effective has.

For recalls specifically, Health Canada has elevated mock recall expectations. Every NHP licence holder should be able to:

Identify every unit of a given lot — internally and downstream — in a defined time window
Show a documented mock recall within the last year, with timing measured and gaps closed
Produce evidence of post-mortem actions and management sign-off

If your trace would take days rather than hours, fix that before it becomes an audit finding. I covered the underlying logic in detail in 9 Ways to Avoid Product Recalls — the principles translate almost directly to NHPs.

5. Records, electronic systems and data integrity

The guidance now gives substantially clearer direction on electronic records, electronic signatures and data integrity. The expectations align broadly with ALCOA+ principles familiar from pharmaceutical GMP — attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring and available.

If you operate an electronic QMS, eLIMS, or batch record system, this is the area to scrutinize:

Are audit trails enabled and reviewed?
Is user access granted on a principle of least privilege?
Are records retrievable within a defined timeframe?
Can you defend the integrity of an electronic signature in front of an inspector?

Paper-based systems are not excluded from these expectations. The principle is the same; the controls just look different.

6. Importer oversight — a real, evidenced regime

For NHP importers and Canadian site licence holders working with foreign manufacturers, Version 4.0 is the single biggest practical change. Importer obligations already existed in Part 3 of the Regulations. The new guide is far more explicit about the evidence Health Canada expects to see.

A compliant importer file under Version 4.0 includes, at minimum:

A signed quality agreement with each foreign manufacturer, specifying GMP responsibilities, change notification, deviation handling and right to audit
Supplier qualification records — initial assessment plus ongoing performance monitoring
Documented review of batch documentation prior to release into Canadian distribution
A documented release decision by the QAP, supported by the underlying records
Evidence of audits (on-site or remote) at a defined frequency

In short: it is no longer enough to confirm that a foreign manufacturer claims to meet GMP requirements. Canadian importers must prove compliance through documented systems, validated data, and demonstrable oversight that will withstand Health Canada scrutiny. Our regulatory affairs, licensing and import/export team is rebuilding importer files for several clients exactly along these lines right now.

What I’m already seeing trip licence holders up

In the first quarter under the new guide, three patterns have emerged in the work coming across my desk:

Pattern one: Stability files that look complete on the surface but lack a written, approved protocol. The studies were run; the data exists; but there is no controlled document that specifies what was tested, how, when, and against what acceptance criteria. Under Version 4.0, this is a finding.

Pattern two: Importer files that conflate purchasing terms with quality agreements. A supply contract is not a quality agreement. Health Canada will look for a separate, signed document that addresses GMP responsibilities specifically.

Pattern three: QMS documents that describe an aspirational state, not the actual one. SOPs that say “the QAP shall review and approve all batch records” are excellent — until inspection day, when records show batches released without that signature. Closing this gap is straightforward but unavoidable.

Documentation that exists in someone’s head is not compliant. Documentation that describes a process the team does not actually follow is worse, because it is now evidence against you.

The 90-day NHP licence holder response

GUI-0158 v4.0 Inspection-Ready Checklist

For clients I am currently working with, this is the structure we are using. It is deliberately conservative because the cost of being unprepared at inspection — a deficiency letter, a hold on releases, reputational impact with retail partners — runs orders of magnitude higher than the cost of preparation.

Days 1–30 — Diagnose. Map your current QMS against Version 4.0, section by section. Inventory every product against real-time stability data. Review QAP designation, authority and reporting line. List all foreign suppliers and assess current quality agreements. Audit electronic records for audit trail and access controls. Score deviation, CAPA and recall systems for effectiveness.

Days 31–60 — Remediate. Issue or refresh quality agreements with each supplier. Approve revised stability protocols. Update SOPs for OOS, deviations, change control and CAPA. Train senior management on their documented role. Define a formal management review calendar. Strengthen batch record and release documentation.

Days 61–90 — Prove. Run a full mock recall and measure traceability time. Conduct an internal audit against Version 4.0 expectations. Document CAPA effectiveness for prior findings. Compile stability report binders by product. Hold a senior management review and capture the sign-off. Build an inspection welcome and evidence binder.

If a 90-day window feels aggressive — that is the point. Health Canada has signalled clearly that the transition period is over. The work to be defensible is the work that should have happened during the six-month transition. For most licence holders, it has not happened yet.

Frequently asked questions

When did GUI-0158 Version 4.0 come into force?

The new GMP guide for natural health products came into force on March 4, 2026, following a six-month transition period after publication on September 4, 2025. It is now the operative guidance for all Health Canada NHP inspections.

Does Version 4.0 change the legal requirements for NHPs in Canada?

No. The legal framework remains Part 3 of the Natural Health Products Regulations. Version 4.0 is guidance that clarifies how Health Canada interprets and inspects against those requirements. The practical effect, however, is a higher evidentiary bar.

Who must comply with GUI-0158 Version 4.0?

Anyone holding a Site Licence under the NHPR, including manufacturers, packagers, labellers, importers, distributors, and those holding a product licence with relevant GMP responsibilities. The guide applies across the full product lifecycle.

Is real-time stability data really required for every NHP?

Yes. Version 4.0 is explicit that real-time stability studies, with a written protocol and a stability report, are expected for every NHP. Accelerated or comparator data alone is not sufficient to support a shelf-life claim.

What is the most common Version 4.0 gap among Canadian NHP importers?

The absence of a signed, GMP-specific quality agreement with each foreign manufacturer. A supply or distribution contract does not satisfy this expectation.

What happens if my facility is not compliant on inspection?

Outcomes range from observations and CAPAs through deficiency letters, holds on release, suspension or revocation of the Site Licence — depending on severity, risk classification and history. Health Canada uses a published risk classification of observations under the new guide. Early remediation almost always changes the trajectory.

What you should do next

If you hold an NHP licence and you have not already done so, the single most useful next step is a structured gap assessment against Version 4.0 — section by section, product by product, supplier by supplier. Done well, it takes about two weeks and produces a prioritized remediation roadmap that your team can execute against. Done poorly, it becomes a binder no one opens.

That is exactly the work MFLRC does. Across our Quality Assurance, Audit and Regulatory Affairs disciplines, we have rebuilt NHP files of this depth for clients ranging from single-product importers to multi-site domestic manufacturers. We are Canadian, anchored in Health Canada practice, and our deliverables — SOPs, gap analyses, submission packages, audit reports — are built to hold up under inspection.

If you would like a sense of what your current position looks like against Version 4.0, book a consultation. I would rather have a 30-minute conversation now than help you respond to a deficiency letter in six months.

Let’s navigate this together.

— Mussarat Fatima, President, MF License & Regulatory Consultants

About the author

Mussarat Fatima is the President of MFLRC and a Health Canada–security-cleared regulatory consultant with more than 20 years of experience in quality assurance, quality control and regulatory affairs across pharmaceuticals, natural health products, food, cosmetics, cannabis and controlled substances. She holds a Master’s in Food Sciences and Biochemistry, is a member of the American Society for Quality (ASQ) and the European QP Association, and serves as a Quality Assurance Person (QAP) for licensed Canadian operators.

Sources and further reading

Health Canada — Good Manufacturing Practices Guide for Natural Health Products (GUI-0158)
Health Canada — GUI-0158 Risk Classification and CAPA Process
Government of Canada — Natural Health Products Regulations (SOR/2003-196)
International Council for Harmonisation — ICH Quality Guidelines (Q1A through Q14)

This article is general regulatory commentary and does not constitute legal advice. For advice specific to your Site Licence, product portfolio or supply chain, contact MFLRC directly.

Book Your GUI-0158 v4.0 Gap Assessment