Institutional Medical Cannabis Compliance Checklist (2026)
This checklist is designed for clinical directors, compliance officers, and program leads at healthcare institutions that supply or store medical cannabis. It distinguishes what the Cannabis Regulations actually require from what accreditation bodies, provincial health authorities, and funders commonly expect.
Scope note: The Cannabis Regulations (SOR/2018-144) create different obligations for hospitals, health care practitioners, and harm reduction programs that are not provincially licensed healthcare facilities. Which provisions apply to your facility depends on your regulatory classification. If you are uncertain, that question requires legal advice before you finalize your compliance program. This checklist addresses hospitals under Part 14, Division 3 (ss.346–352) and health care practitioners (ss.330–331). Harm reduction programs, MAPs, and supportive housing operators should contact Flora’s institutional team for guidance on the applicable pathway for their setting.
How to Use This Checklist
Items marked [REQUIRED] reflect specific obligations under the Cannabis Regulations (SOR/2018-144). Non-compliance carries regulatory risk.
Items marked [BEST PRACTICE] are not mandated by cannabis law but are standard in well-governed healthcare institutions and are commonly reviewed by provincial health authorities, accreditation bodies, and funders.
Section 1: Legal Authorization and Registration
☐ [REQUIRED] Each patient has a valid medical document from a healthcare practitioner licensed to authorize cannabis in their province
☐ [REQUIRED] Each patient is registered with a Health Canada licensed seller — not a provincial recreational retailer
☐ [REQUIRED] Institutional supply is sourced exclusively from Health Canada-licensed sellers
☐ [BEST PRACTICE] Medical documents are reviewed for expiry dates at intake and flagged 60 days before renewal is required
☐ [BEST PRACTICE] Your supplier’s current status on Health Canada’s licensed seller list has been verified
Cannabis Regulations, SOR/2018-144, Part 14, Division 1 (ss.277–305)
Section 2: Security
☐ [REQUIRED — hospitals] The individual in charge of the hospital has taken reasonable steps to protect cannabis products from theft or loss
☐ [REQUIRED — health care practitioners] The practitioner has taken reasonable steps to protect cannabis products in their possession from theft or loss
☐ [BEST PRACTICE] Cannabis is stored in a dedicated locked cabinet, medication room, or individually locked containers per patient
☐ [BEST PRACTICE] Access is restricted to a documented list of authorized personnel
☐ [BEST PRACTICE] Environmental conditions (temperature 15–25°C, humidity below 65% RH) are maintained — this follows pharmaceutical storage standards, not cannabis regulations
☐ [BEST PRACTICE] Storage infrastructure is reviewed when patient volume changes significantly
Cannabis Regulations, SOR/2018-144, ss.330 (health care practitioners), 347 (hospitals)
Note: The Cannabis Regulations do not specify lock types, safe grades, cabinet specifications, surveillance systems, or environmental controls for hospitals or health care practitioners. “Reasonable steps” is assessed against your specific circumstances — patient volume, facility type, quantity on hand. These best practices reflect sound governance, not legal mandates.
Section 3: Record Keeping
☐ [REQUIRED — hospitals] Records are retained for all cannabis products received, including class, brand names, quantity, source name and address, and date received
☐ [REQUIRED — hospitals] Records are retained for all cannabis products distributed or sold to patients, including patient name, prescriber name and profession, daily gram quantity from the medical document, cannabis class, quantity, and date
☐ [REQUIRED — hospitals] Records are retained for all cannabis products returned or transferred to another authorized person
☐ [REQUIRED] All cannabis records are retained for a minimum of two years from the date of preparation
☐ [BEST PRACTICE] Dispensing logs include date, patient identifier, quantity dispensed, and staff identifier
☐ [BEST PRACTICE] Inventory is reconciled on a schedule appropriate to patient volume
☐ [BEST PRACTICE] Records are retained according to provincial healthcare documentation standards, which may require longer retention than the two-year federal minimum
☐ [BEST PRACTICE] Records are stored securely with access limited to authorized personnel under applicable provincial privacy legislation
Cannabis Regulations, SOR/2018-144, ss.331 (health care practitioners), 340 (pharmacists), 351 (hospitals)
Section 4: Loss and Theft
☐ [REQUIRED — hospitals] A documented procedure exists for responding to loss or theft of cannabis products
☐ [REQUIRED — hospitals] Any theft or loss is reported to the Minister of Health within 10 days of becoming aware of it
☐ [REQUIRED — health care practitioners] Any theft or loss of cannabis held for professional practice is reported to the Minister of Health within 10 days of becoming aware of it
☐ [REQUIRED — hospital pharmacists] Any theft or loss of cannabis on pharmacy premises or under pharmacist responsibility is reported to the Minister of Health within 10 days
☐ [BEST PRACTICE] A police report is filed for any theft or significant loss, even where not independently required by cannabis regulations
☐ [BEST PRACTICE] Incident report completed and retained regardless of regulatory reporting threshold
☐ [BEST PRACTICE] Root cause review conducted for any loss or theft event
Cannabis Regulations, SOR/2018-144, ss.330 (health care practitioners), 342 (hospital pharmacists), 347 (hospitals)
Note: The Cannabis Regulations do not specify a police reporting obligation for hospitals, health care practitioners, or hospital pharmacists under Division 3. Your provincial legislation or institutional policy may independently require it.
Section 5: Unused, Expired, or Returned Cannabis
☐ [REQUIRED — hospitals] Unused or expired cannabis is not independently disposed of — it must be returned to the supplying licensed seller or transferred to a licensed seller authorized to destroy cannabis
☐ [REQUIRED — hospitals] Returns are made on receipt of a written request signed by or on behalf of the licence holder
☐ [BEST PRACTICE] A documented procedure exists for handling cannabis that is abandoned, left by discharged patients, or otherwise unaccounted for
☐ [BEST PRACTICE] All return and transfer transactions are documented and retained with inventory records
Cannabis Regulations, SOR/2018-144, s.348(7)
Note: Hospitals cannot independently dispose of cannabis — including mixing with waste — without regulatory authority. Independent disposal without return or transfer to a licensed holder is non-compliant under Division 3. Confirm your disposal procedure against this requirement.
Section 6: Patient Consent and Rights
☐ [BEST PRACTICE — may be required by provincial healthcare law] Patients have provided written informed consent to the facility storing cannabis on their behalf
☐ [BEST PRACTICE] Participation in the holding program is documented as voluntary
☐ [BEST PRACTICE] Patients have been informed of their right to withdraw and receive their cannabis back
☐ [BEST PRACTICE] Patient information is protected under applicable provincial privacy legislation
☐ [BEST PRACTICE] Participation in the cannabis program is not disclosed to unauthorized parties without patient consent
Section 7: Staff
☐ [BEST PRACTICE] Staff authorized to access cannabis storage are identified in a maintained list
☐ [BEST PRACTICE] Authorized staff have received orientation on your facility’s cannabis protocols
☐ [BEST PRACTICE] A designated lead is responsible for program oversight and compliance review
☐ [BEST PRACTICE] Staff know not to withhold cannabis as a disciplinary measure — this is contraindicated in harm reduction settings and may violate tenancy rights
Section 8: Supplier Documentation
☐ [BEST PRACTICE] Certificate of Analysis is obtained for each product batch received — confirms potency, terpene profile, microbial contamination, heavy metals, and pesticide testing
☐ [BEST PRACTICE] Supplier’s Health Canada licence has been verified as current
☐ [BEST PRACTICE] Chain of custody documentation is available for all product batches
☐ [BEST PRACTICE] A supply agreement with your licensed seller is in place and reviewed annually
Section 9: Funder and Accreditation Readiness
☐ [BEST PRACTICE] Written program policy exists covering security, access, documentation, and incident response
☐ [BEST PRACTICE] Policy cites applicable regulatory sections and has been reviewed by legal counsel
☐ [BEST PRACTICE] Program is explicitly covered under your facility’s liability insurance — confirm this in writing with your insurer
☐ [BEST PRACTICE] Monthly supply reports, patient registration summaries, and batch-level COAs are retained and available for funder review
☐ [BEST PRACTICE] Program has been disclosed to your provincial regulatory college or health authority as applicable
Common Audit Findings to Avoid
Mixing patient supplies: Each patient’s cannabis must be stored and tracked separately. Combining supply from different patients is a serious compliance failure.
Expired medical documents on file: Active delivery against an expired authorization creates regulatory exposure. Audit authorization expiry dates quarterly at minimum.
Undocumented returns or transfers: Cannabis that is unused, damaged, or left by a discharged patient must be returned to the licensed seller or transferred for destruction with documentation. Undocumented handling is indistinguishable from diversion.
Transferring cannabis between registered patients: Even with apparent consent, this violates the Cannabis Regulations.
Storage accessible to unauthorized persons: Any arrangement where unauthorized persons could access cannabis fails the reasonable steps standard.
Assuming independent disposal is permitted: Hospitals cannot mix cannabis with waste and discard it. Return or transfer to a licensed holder is required.
This checklist is based on the Cannabis Regulations, SOR/2018-144, current to February 4, 2026. It does not constitute legal advice. Which provisions apply depends on your facility’s regulatory classification — confirm this with legal counsel before finalizing your compliance program. Cannabis is not an approved therapeutic product in Canada.
Flora Initiative provides institutional supply with full batch COA documentation, chain of custody records, and compliance support. Contact our institutional team for information on supply arrangements and the applicable regulatory pathway for your setting.