Directive on the Electronic Transmission of Information Under the Controlled Drugs and Substances Act
This document provides technical specifications regarding the transmission of information in electronic formats under regulations made under the Controlled Drugs and Substances Act (CDSA).
This Directive applies to electronic information that must be provided by licensed producers and former licensed producers to licensing authorities in accordance with subsection 124(8) of the Access to Cannabis for Medical Purposes Regulations (ACMPR).
In addition to the following definitions, certain terms used in this directive are defined in the CDSA and the ACMPR. Please refer to section 2 of the CDSA, and section 1 of the ACMPR.
- Information can be read by a person using common office software.
- Information can be read by a computer.
4. Communication of Information Under the ACMPR
Licensed producers and former licensed producers must meet the specifications indicated below in order to be in compliance with section 124 of the ACMPR.
Licensed producers and former licensed producers must provide required information to licensing authorities in one of the following electronic formats: Extendible Markup Language (XML) or Comma Separated Values (CSV).
Secure Information Transmission
Required information must be transmitted by licensed producers and former licensed producers to licensing authorities by a method that preserves the information in a format that is both human and machine-readable. Examples of acceptable information transmission methods are server-to-server direct transmission, and the use of a secure USB key.
Licensed producers and former licensed producers must use the following technologies to ensure the integrity and security of the information transmitted to licensing authorities: digital signature, encryption, and intrusion protection to prevent unauthorized processing and accidental loss of/and destruction or damage to sensitive personal information.
5. Further Information
For any questions, please contact:
National Compliance and Enforcement Section
Office of Medical Cannabis
Cannabis Legalization and Regulation Branch
Note: The Personal Information Protection and Electronic Documents Act (PIPEDA) or provincial privacy legislation that has been found to be substantially similar to PIPEDA (in British Columbia, Alberta, and Quebec) apply to the collection, use and disclosure of personal information by businesses and other organizations. Licensed producers and former licensed producers are expected to comply with these statutes.
Report a problem or mistake on this page
- Date modified: