Directive on the Electronic Transmission of Information Under the Controlled Drugs and Substances Act

1. Purpose

This document provides technical specifications regarding the transmission of information in electronic formats under regulations made under the Controlled Drugs and Substances Act (CDSA).

2. Scope

This Directive applies to electronic information that must be provided by licensed producers and former licensed producers to licensing authorities in accordance with subsection 124(8) of the Access to Cannabis for Medical Purposes Regulations (ACMPR).

3. Definitions

In addition to the following definitions, certain terms used in this directive are defined in the CDSA and the ACMPR. Please refer to section 2 of the CDSA, and section 1 of the ACMPR.

Human-readable
Information can be read by a person using common office software.
Machine-readable
Information can be read by a computer.

4. Communication of Information Under the ACMPR

Licensed producers and former licensed producers must meet the specifications indicated below in order to be in compliance with section 124 of the ACMPR.

Electronic Format

Licensed producers and former licensed producers must provide required information to licensing authorities in one of the following electronic formats: Extendible Markup Language (XML) or Comma Separated Values (CSV).

Secure Information Transmission

Required information must be transmitted by licensed producers and former licensed producers to licensing authorities by a method that preserves the information in a format that is both human and machine-readable. Examples of acceptable information transmission methods are server-to-server direct transmission, and the use of a secure USB key.

Licensed producers and former licensed producers must use the following technologies to ensure the integrity and security of the information transmitted to licensing authorities: digital signature, encryption, and intrusion protection to prevent unauthorized processing and accidental loss of/and destruction or damage to sensitive personal information.

5. Further Information

For any questions, please contact:

National Compliance and Enforcement Section
Office of Medical Cannabis

Cannabis Legalization and Regulation Branch
Health Canada

Note: The Personal Information Protection and Electronic Documents Act (PIPEDA) or provincial privacy legislation that has been found to be substantially similar to PIPEDA (in British Columbia, Alberta, and Quebec) apply to the collection, use and disclosure of personal information by businesses and other organizations. Licensed producers and former licensed producers are expected to comply with these statutes.

Report a problem or mistake on this page
Please select all that apply:

Privacy statement

Thank you for your help!

You will not receive a reply. For enquiries, contact us.

Date modified: