Top 5 Cannabis Compliance Mistakes (and How to Avoid Them)

In the cannabis industry, compliance is the business. A single serious finding during a Health Canada inspection can freeze your inventory, trigger a recall, or put your licence at risk. Yet the same mistakes keep surfacing year after year, and most of them are avoidable with disciplined quality systems and the right preparation.

Health Canada is inspecting more, not less. In its compliance and enforcement report for 2024 to 2025, the regulator reported 889 inspections under the Cannabis Act and its regulations, and the most common findings pointed straight back to good production practices and recordkeeping. This guide breaks down the five mistakes that draw the most enforcement attention, and the practical steps to fix each one before an inspector finds it.

Executive summary

The five mistakes that most often lead to cannabis compliance findings are treating good production practices as a one-time setup, weak recordkeeping and document retention, gaps in security clearances and key personnel, inaccurate or late reporting in the Cannabis Tracking and Licensing System, and promotion and labelling violations. Health Canada's 2024-2025 data shows good production practices and document retention among the leading non-compliances, and promotions alone generated 436 cases of potential non-compliance. The common thread is the absence of a living quality system. Strong SOPs, internal audits, accurate records and timely reporting are what keep a licensed producer inspection-ready.

What the latest inspection data tells us

What it is: Each year Health Canada publishes a summary of its cannabis inspection activity. The 2024-2025 report covers 889 inspections, including 437 regular inspections, 101 targeted inspections, 128 compliance verifications, 197 inspections of personal and designated medical production, and 26 promotion inspections.

Why it matters: The findings are consistent and predictable. Health Canada repeatedly cited non-compliances related to good production practices, unsatisfactory retention of documents and information, and licence holders not conducting activities in line with their responsibilities. On the personal and designated side, 50 registrations were revoked or refused. These are not exotic technical failures. They are basic quality system gaps.

What to do: Treat the published findings as a free risk assessment. If the regulator keeps citing GPP and recordkeeping, those are exactly where your internal audit program should focus first.

Mistake 1: Treating good production practices as a one-time setup

What it is: Good production practices, or GPP, are the sanitation, equipment, premises, testing and quality assurance requirements set out in the Cannabis Regulations. The mistake is building a GPP system to pass the initial licence review, then letting it drift as the operation scales.

Why it matters: GPP non-compliance is one of Health Canada's most frequently cited findings. As staff turn over and production grows, sanitation schedules slip, equipment qualification lapses, and the quality assurance person loses visibility. An inspector who finds an out-of-date sanitation record or an unqualified piece of equipment will question your entire quality system.

What to do: Run GPP as a living system. Keep sanitation, pest control and equipment qualification records current, give your quality assurance person real authority to release or reject product, and schedule periodic GPP self-checks. Strong quality assurance and quality control support keeps the system from drifting between inspections.

Mistake 2: Weak recordkeeping and document retention

What it is: The Cannabis Regulations require licence holders to create and keep detailed records covering production, inventory, distribution, testing, sanitation, security and more, and to retain them for the required periods. Unsatisfactory document retention is a recurring inspection finding.

Why it matters: If it is not documented, in the eyes of a regulator it did not happen. Missing batch records, incomplete logs, records that cannot be retrieved on request, or data with no clear trail all read as a loss of control. Poor records also make recalls slower and more painful, because you cannot trace affected product quickly.

What to do: Define record requirements and retention periods in SOPs, train staff to complete records in real time, and run periodic document reviews. Good records are also your first line of defence in a product recall, where fast and accurate traceability limits the damage.

Mistake 3: Gaps in security clearances and key personnel

What it is: Individuals in key positions, such as directors, officers and those with management authority over cannabis activities, must hold a valid Health Canada security clearance. Clearances are granted for a maximum of five years and must be renewed before they expire.

Why it matters: A lapsed clearance, an unauthorized person performing a key role, or an expired quality assurance person designation can halt regulated activities. Personnel changes are easy to overlook during rapid growth, and an inspector will check that the people running your operation are actually cleared to do so.

What to do: Maintain a personnel matrix that tracks every key position, the holder, their clearance status and expiry date. Start renewals well in advance, and never let a key role sit vacant or be filled by an uncleared individual. Build personnel changes into your change-control process.

Mistake 4: Inaccurate or late CTLS reporting

What it is: Licence holders must submit monthly inventory and activity reports through the Cannabis Tracking and Licensing System (CTLS). These reports capture cannabis on hand, received, produced, destroyed and sold in each reporting period and feed the national cannabis tracking system that guards against diversion.

Why it matters: As of 2025, Health Canada has explicitly prioritized information integrity in CTLS. Late submissions, inventory that does not reconcile to physical counts, or profile information that is out of date are now frontline compliance concerns. Reporting discrepancies can also signal diversion, which draws far closer scrutiny.

What to do: Reconcile inventory regularly so your physical counts match your records and your CTLS reports. Assign clear ownership of monthly reporting, keep your CTLS profile and personnel details current, and investigate any variance promptly and document the outcome.

Mistake 5: Promotion and labelling violations

What it is: The Cannabis Act sets strict limits on how cannabis can be promoted, packaged and labelled, including plain packaging rules, the standardized cannabis symbol, mandatory health warnings and THC and CBD content statements. Health Canada's packaging and labelling guide for cannabis products sets out the detailed requirements.

Why it matters: Promotion is one of the most actively enforced areas. In 2024-2025, Health Canada created 436 cases of potential non-compliance related to promotions, which led to 130 actions with regulated parties. Appealing packaging, social media that looks like lifestyle marketing, or a label missing a required element can all draw a warning letter or an administrative monetary penalty.

What to do: Route every label and promotional asset through a regulatory review before it goes out. Confirm the cannabis symbol, health warnings and content statements are present and correct, and train marketing teams on what counts as prohibited promotion. When the streamlining amendments adjusted certain labelling rules in 2025, those changes had to be reflected in artwork, so keep your templates current.

The five mistakes at a glance

Mistake	Main compliance risk	Primary fix
GPP treated as one-time setup	Sanitation, equipment and QA findings	Run GPP as a living system with self-checks
Weak recordkeeping	Unsatisfactory document retention findings	SOP-defined records, real-time entry, document reviews
Security clearance gaps	Halted activities, key-position non-compliance	Personnel matrix with clearance expiry tracking
Inaccurate or late CTLS reporting	Information integrity and diversion concerns	Regular inventory reconciliation, clear reporting owner
Promotion and labelling violations	Warning letters and monetary penalties	Mandatory regulatory review of all labels and promotions

The unifying fix: a living quality system

Every one of these mistakes is a symptom of the same root cause, a quality system that exists on paper but is not actively maintained. The cure is a cycle of internal audits, honest root cause analysis, and corrective and preventive action that closes gaps before Health Canada finds them. The 2025 streamlining amendments reduced some record-keeping and reporting burdens, but the discipline behind a strong quality system remains essential. A finding you catch and fix yourself is a strength. The same finding caught by an inspector is a liability.

Cannabis compliance checklist

Keep sanitation, pest control and equipment qualification records current and review them on a schedule.
Define record types and retention periods in SOPs and complete records in real time.
Track every key position and security clearance with expiry dates and start renewals early.
Reconcile physical inventory to records and submit accurate CTLS reports on time every month.
Review every label and promotional asset against the Cannabis Act before release.
Run scheduled internal audits and mock inspections, and close every finding with documented corrective action.

Common pitfalls beyond the top five

No mock inspections. Teams that have never rehearsed an inspection struggle to produce records on request.
Copy-paste SOPs. Generic procedures that do not match your actual operation fail under questioning.
Ignoring regulatory change. Amendments such as the 2025 streamlining package change expectations, and stale systems fall behind.
Treating findings as paperwork. A finding without a real root cause analysis will recur at the next inspection.

Frequently asked questions

What is the most common cannabis compliance finding in Canada?

Health Canada's 2024-2025 inspection data repeatedly cited non-compliances related to good production practices, unsatisfactory retention of documents and information, and licence holders not conducting activities in line with their responsibilities. GPP and recordkeeping are the most persistent problem areas.

How often does Health Canada inspect cannabis licence holders?

Inspection frequency varies by licence type and risk, but the volume is rising. Health Canada conducted 889 inspections in 2024-2025, including regular, targeted and promotion inspections and compliance verifications. Licence holders should be ready for inspection at any time.

How long is a cannabis security clearance valid?

A Health Canada cannabis security clearance is granted for a maximum of five years. Individuals in key positions must renew before their clearance expires to keep performing their roles without interruption.

What is CTLS and why does reporting accuracy matter?

The Cannabis Tracking and Licensing System is Health Canada's platform for licence management and monthly inventory and activity reporting. As of 2025, the regulator has prioritized information integrity in CTLS, so late or inaccurate reports and inventory that does not reconcile are frontline compliance concerns.

Did the 2025 amendments make cannabis compliance easier?

The Streamlining of Requirements amendments (SOR/2025-43), in force on 12 March 2025, added labelling flexibility, allowed co-packing, simplified potency labelling to total THC and total CBD, and removed several record-keeping and reporting burdens, such as the annual promotion expense report and some destruction and ingredient-list records. They reduce administrative burden in places but do not lower the core standards for production, records or reporting.

How can a small licensed producer stay inspection-ready?

Focus on the basics that draw the most findings. Keep GPP and records current, track clearances, reconcile inventory and report on time, and review promotions before release. Scheduled internal audits and an occasional independent gap assessment catch problems early, which is far cheaper than an enforcement action.

How MFLRC can help

MFLRC helps cannabis and hemp licence holders close the exact gaps Health Canada keeps citing. Our audit and gap assessment services include mock inspections, GPP self-checks and CAPA review, so you find and fix issues before an inspector does.

We also build practical SOPs, quality systems and personnel matrices, and provide regulatory affairs, licensing and reporting support, all led by a Health Canada security cleared Quality Assurance Person with more than twenty years of regulated-industry experience. For a wider view of the essentials, see our guide to cannabis compliance in Canada.

Book a cannabis compliance assessment

Conclusion

The top five cannabis compliance mistakes are not mysterious, and Health Canada's own data tells you exactly where to look. Good production practices, recordkeeping, security clearances, CTLS reporting and promotion controls are where licence holders stumble most often, and all five trace back to a quality system that needs to be lived, not filed. Build that discipline, audit yourself honestly, and fix findings at their root, and an inspection becomes a routine confirmation of good work rather than a threat to your business. When you want an expert set of eyes before the regulator arrives, that is exactly where MFLRC adds value.