Health Canada's Post-Market Surveillance Requirements for NHPs: What Most Licence Holders Are Missing

Most NHP companies treat product licensing as the hard part. The evidence package, the compendial monograph navigation, the product licence application itself — it’s genuinely demanding work, and when that Health Canada approval arrives, it feels like crossing a finish line. It isn’t.

Health Canada’s post-market surveillance requirements for natural health product licence holders are, in several ways, more operationally demanding than the pre-market process. They’re also the area where we consistently see the weakest compliance systems during regulatory due diligence reviews. Licence holders who underinvest in post-market obligations aren’t just risking a warning letter — they’re exposed to licence suspension under section 25 of the NHPR, and to product recalls that can move faster than any remediation plan.

Here’s what the regulations actually require, and where the gaps most often appear.

What the Natural Health Products Regulations Require After Market Entry

The Natural Health Products Regulations (SOR/2003-196, commonly referred to as the NHPR) are the primary framework governing post-market obligations for NHP licence holders in Canada. Parts 2 and 3 of the NHPR lay out the specifics — and they’re worth reading closely, because the obligations are more prescriptive than the general GMP language suggests.

Adverse reaction reporting is the most time-sensitive requirement. Under Section 43(1) of the NHPR, a licence holder must report a serious adverse reaction to Health Canada’s Minister within 15 calendar days of becoming aware of it. This is not a business-days figure. It doesn’t pause on weekends or statutory holidays. If a consumer contacts you on a Friday afternoon with a serious unexpected reaction, your 15-day clock starts that day.

Section 44 creates a separate annual reporting obligation: a summary of all non-serious adverse reactions received during the calendar year must be filed with Health Canada by March 31 of the following year. Many companies conflate these two requirements or assume the annual report covers everything. It doesn’t. Serious adverse reactions require individual, time-bound reports — the annual summary is additive, not a substitute.

Licence conditions also carry ongoing enforceability. If your product licence was granted with conditions — outstanding stability data commitments, labelling revision timelines, or updated evidence requirements — those aren’t aspirational targets. Health Canada’s Regulatory Operations and Enforcement Branch (ROEB) follows up on outstanding licence conditions during inspections, and an unfulfilled condition is a straightforward compliance gap.

Record-keeping requirements under the NHPR are longer than many companies realize. All records related to your NHP — manufacturing, testing, distribution, complaints, and adverse reactions — must be retained for a minimum of one year after the expiry date of the lot in question, or at least three years from the date the record was created, whichever is longer. For a product with a 24-month shelf life, that can mean keeping records well into the fourth or fifth year post-manufacture.

The Five Post-Market Obligations Most NHP Companies Are Under-Resourced For

The 15-day adverse reaction reporting window gets reasonable attention because Health Canada has been explicit about it. What’s less visible — until an inspector arrives — are the operational systems that many NHP companies have never properly built out.

Complaint handling and trending. Health Canada’s NHP GMP guidance expects a documented system for receiving, investigating, and closing consumer complaints. That’s expected. What ROEB inspectors specifically look for is trending analysis — are you examining complaint data across lots and batches to detect patterns? A single complaint about a product’s off-odour might be noise. Twelve complaints across three months from the same production run is a signal your quality system should have caught. If you can’t demonstrate aggregate analysis, not just individual ticket resolution, expect a finding.

Out-of-specification (OOS) investigation protocols. Any lot that fails to meet release specifications requires a documented OOS investigation before any disposition decision is made. This isn’t optional under Canadian GMP — it’s a foundational quality system requirement. Many NHP companies, particularly smaller ones running outsourced manufacturing, don’t have a clear procedure for what happens when a COA comes back failing. Who investigates? What’s the investigation timeline? How is root cause documented and escalated? “We contact the contract manufacturer” is not a satisfying answer during a regulatory inspection.

Ongoing stability testing. Pre-market stability data gets you your product licence. Ongoing stability — monitoring that your product continues to meet specifications throughout its actual shelf life — is a separate, continuing commitment. If a 24-month expiry date was set based on accelerated stability data, Health Canada’s GMP guidance expects long-term real-time stability studies to confirm that shelf life. Lots where real-time stability monitoring has lapsed, or was never initiated after launch, are a recurring GMP inspection finding across the NHP sector.

Contaminant and heavy metal testing programs. Post-market surveillance isn’t limited to consumer-reported adverse events. It includes proactive market surveillance testing — pulling lots from inventory or the market and testing them against specifications, including for heavy metals and microbial contamination. Health Canada has been increasingly active in market surveillance for NHPs, particularly for products containing botanical ingredients sourced internationally. The limits for cadmium, lead, mercury, and arsenic are defined in Health Canada’s guidance, and companies that rely exclusively on supplier certificates of analysis without independent verification are carrying meaningful regulatory and reputational risk. Conducting heavy metal testing in Canada through an accredited contract laboratory — on a defined schedule, not just reactively — is now a baseline expectation for credible NHP compliance programs.

Distribution record integrity for recalls. If Health Canada’s market surveillance or your own data triggers a product recall, you need to trace every affected lot to every customer within a very short window. Distribution records that can’t be queried by lot number, shipment date, or customer segment will slow a recall response significantly — and regulators notice. Your distribution database is a GMP asset, not just a logistics tool.

Building a Post-Market Surveillance System That Passes ROEB Scrutiny

The practical reality is that many NHP companies build post-market surveillance systems reactively — after a complaint escalation, an inspection finding, or a market recall. Building proactively is less expensive and creates the kind of compliance confidence that makes an announced inspection a manageable event rather than a crisis.

A few structural elements consistently differentiate companies that exit ROEB inspections with zero major findings from those that accumulate repeat observations:

A unified adverse event intake process. All incoming channels — website contact forms, customer service email, retailer reports, social media mentions, and healthcare practitioner calls — should feed into a single tracked system. If your consumer affairs team and your regulatory affairs team are running separate complaint logs, cross-channel patterns get missed. A serious adverse reaction that sits in a non-regulatory inbox for eight days before anyone identifies it as reportable can erode your 15-day window to almost nothing.

A CAPA program with defined closure metrics. Corrective and preventive action systems are required under Canadian GMP, but Health Canada inspectors have been explicit that they’re evaluating quality culture, not just documentation. A CAPA log with dozens of items months past their due dates signals a systemic problem, not an administrative backlog. Open CAPAs need ownership, timeline commitments, and documented effectiveness checks.

Periodic internal audits against NHPR requirements specifically. An annual internal audit scoped against Parts 2 and 3 of the NHPR — not just general GMP — will surface compliance gaps before ROEB does. This is particularly valuable after personnel transitions, when post-market procedures tend to become inconsistently followed first.

Contracted testing support for surveillance sampling. If your internal laboratory capacity doesn’t support routine market surveillance, working with an ISO 17025-accredited contract laboratory in Canada on a defined sampling plan keeps your program proactive. The critical differentiator is documentation — a written surveillance testing plan with defined frequencies, product and parameter scope, and investigation thresholds, rather than ad hoc testing after something goes wrong.

Where the Regulatory Direction Is Heading

Health Canada’s NHP regulatory modernization work — ongoing since the 2022 consultations on modernizing the natural health product framework — signals a continued tightening of post-market oversight. Proposals have included strengthened mandatory recall authorities, enhanced adverse reaction reporting enforcement mechanisms, and closer alignment with the post-market frameworks that govern other therapeutic products under the Food and Drugs Act.

Companies already operating with pharmaceutical-grade post-market surveillance systems will absorb that regulatory tightening without significant disruption. Those operating at the minimum NHPR threshold will face a harder adjustment. The gap between those two positions is largely an investment and process decision, not a technical one.

If you haven’t conducted a structured review of your NHP post-market surveillance program against Sections 43 through 49 of SOR/2003-196 within the last 12 months, that’s the most concrete starting point. Map your current documented procedures against each specific regulatory requirement, identify gaps, assign clear ownership, and set a 90-day remediation timeline. That’s an achievable scope — and it’s what separates genuinely inspection-ready companies from those that are simply hoping ROEB doesn’t show up this cycle.

---

Written by Nour Abochama, Quality & Regulatory Advisor, Androxa. Learn more about our team

Talk to our team about Health Canada compliance. Contact us

Related from our network

• Heavy Metal and Contaminant Testing for Supplement and NHP Manufacturers — Qalitex Laboratories offers ISO 17025-accredited testing for heavy metals, microbial contamination, and label accuracy for supplement and natural health product companies operating in North American markets.
• Post-Market Surveillance and Adverse Event Reporting Under EU Cosmetics Regulation — Care Europe advises Canadian NHP and cosmetics brands on post-market surveillance obligations under EU Regulation (EC) No 1223/2009 for brands expanding into European markets.