Australian Cannabis LP Compliance Guide for ODC, TGA & PIC/S GMP

Licensed under the Narcotic Drugs Act, or applying? Here is what Australian Licensed Producers need to know to stay clear of the ODC, the TGA, and your state Poisons authority.

Australian Licensed Producers operate inside one of the most demanding multi-regulator frameworks in the global cannabis industry. There is no single agency to satisfy. You are answering to the Office of Drug Control for licensing, the Therapeutic Goods Administration for manufacturing and quality, and your state or territory Poisons authority for wholesale and supply. One gap in any of those three obligations can halt your entire operation. This Australian cannabis compliance checklist walks through what each regulator expects, where producers commonly fall short, and what to fix first.

The guide is written for compliance managers, QA leads, and licence holders at Australian LPs operating under the Narcotic Drugs Act 1967. The principles also apply to anyone applying for a Medicinal Cannabis Licence and trying to understand the obligations they are signing up for. Every regulatory number quoted comes from the primary source: the Narcotic Drugs Act, TGO 93, the PIC/S Guide to GMP, or published ODC enforcement actions.

Who Regulates Cannabis in Australia? The ODC, TGA, and State Framework

Unlike Canada (where Health Canada is the single federal regulator) or the United States (where state-level Cannabis Control Boards lead), Australia’s medicinal cannabis sector is governed by three layers operating in parallel. Each has its own statute, its own inspection powers, and its own reporting timelines. Confusing one for another is a common cause of avoidable compliance failures.

State and territory frameworks vary materially. New South Wales operates under the Poisons and Therapeutic Goods Regulation 2008, Victoria under the Drugs, Poisons and Controlled Substances Act, and Queensland under the Medicines and Poisons Act 2019. Each has its own wholesale licence forms, fee schedules, and compliance routines. The federal ODC licence does not waive the state authorisation, and the state authorisation does not satisfy ODC. You need both, and they renew on different cycles.

For TGA-specific obligations (the part most LPs spend the most time on), the relevant standard is the Therapeutic Goods Order No. 93 and the PIC/S Guide to GMP. The TGA medicinal cannabis manufacturing pathway is built around those two documents and the ARTG listing process. We cover both in detail below.

What Does an ODC Cannabis Licence Actually Require?

The Office of Drug Control administers licensing under the Narcotic Drugs Act 1967, which itself implements Australia’s obligations under the Single Convention on Narcotic Drugs 1961. This treaty heritage matters: it is the reason the ODC reports licensee-level data to the International Narcotics Control Board, and it is the reason cannabis activities are licensed centrally rather than at the state level.

The Single Licence and Activity Permits

Since the Narcotic Drugs Amendment (Medicinal Cannabis) Act came into effect, the three legacy licence types (cultivation, production, and manufacture) have been consolidated into a single Medicinal Cannabis Licence. Commercial licences are perpetual and do not require renewal. Research-only licences remain time-limited. On top of the Single Licence, every licensee must hold activity-specific permits for each authorised site. Cultivation, production, and manufacture each require a separate permit per location, and the ODC treats each site as an independent reporting unit.

The Fit and Proper Person Test

Sections 8A and 8B of the Narcotic Drugs Act 1967 require every licensee, every individual involved in the operation, and every corporate business associate to pass a Fit and Proper Person test. This is not a one-off. The ODC can reassess fit-and-proper status at any time during the licence lifecycle. Criminal history checks, financial probity assessments, and adverse-information disclosures are mandatory inputs. A change in director, ultimate beneficial owner, or controlling interest is a reportable event. Producers who treat board changes as a corporate-secretary matter rather than a compliance matter routinely run into trouble here.

Supply Chain Viability and Single-Crop Rules

Cultivator applicants have to demonstrate supply chain viability at the point of licence application: who will buy your raw material, and is that buyer GMP-licensed for downstream manufacture? Unprocessed raw cannabis cannot be exported. Only finished ARTG-listed medicines, cannabis extracts (including non-final dosage forms), and GMP-processed dose-standardised dried flower may leave the country. The Single Convention also requires single-crop compliance on licensed sites: only cannabis may be grown on land authorised under your ODC permit. Mixed crops are not permitted, even if the second crop is unrelated to therapeutics.

How Has Australian Cannabis Compliance Changed Since 2021?

Two shifts define the current enforcement environment, and both are recent enough that producers who built their compliance systems before 2021 are working from an outdated map.

Single Licence Reform

The 2021 amendments to the Narcotic Drugs Act consolidated three separate licence streams into one perpetual licence with activity permits attached. The intent was to reduce regulatory burden. The practical effect is that every activity (cultivation, production, manufacture) still requires its own permit per site, but the umbrella licence no longer expires. Producers sometimes misread “perpetual” as “self-maintaining”. It is not. Quarterly reporting, Fit and Proper updates, security overlay revisions, and ODC inspections continue across the life of the licence. The perpetual status applies only to the underlying licence document, not the obligations that come with it.

ODC Enforcement Is Intensifying

Through 2025 and into 2026, the ODC has issued more than A$217,000 in infringement notices to Australian licensees, including multiple Australian licensed producers. These are infringement notices issued by the Office of Drug Control under the Narcotic Drugs Act, not TGA enforcement, and they sit alongside the ODC’s published policy of conducting at least one unannounced inspection per licensee per 12-month period. Inspectors can enter any licensed premises without consent and without notice under the Regulatory Powers Act 2014 framework activated by the Narcotic Drugs Act. The practical implication for an LP is straightforward: your facility has to be audit-ready every day of the year, not just before a scheduled review.

Import Competition Is Reshaping the Market

In 2024 Australia imported approximately 77.4 tonnes of medicinal cannabis, with around 80% sourced from Canada and the balance from 15 other countries. FreshLeaf and Prohibition Partners project the Australian medicinal cannabis market to exceed A$3 billion in retail value by 2028, though estimates vary year to year. The competitive implication for domestic producers is that quality and compliance documentation are the differentiators that win formulary access. Importers arrive with GACP and EU-GMP paperwork already in hand, and Australian LPs cannot afford a TGO 93 batch failure when a Canadian supplier will fill the gap inside a week.

Get the Complete Australian LP Compliance Checklist

The full PDF includes the printable five-section checklist (ODC licensing, TGA manufacturing, GMP and GACP, traceability, priority actions), every TGO 93 limit in one table, the quarterly reporting calendar, and the security overlay items the ODC flags most often. Drop it straight into your QA folder.

Download Free Guide

TGA Manufacturing Standards: TGO 93 and PIC/S GMP v17

The Therapeutic Goods Administration regulates the manufacturing side of medicinal cannabis: who can manufacture, against what quality standard, and how product gets onto the Australian Register of Therapeutic Goods. The two documents that drive day-to-day TGA compliance are Therapeutic Goods Order No. 93 (TGO 93), the quality standard for medicinal cannabis, and the PIC/S Guide to GMP, the manufacturing standard.

TGA Manufacturing Licence

If you manufacture cannabis products domestically you need a TGA Licence to Manufacture Therapeutic Goods. This is a distinct authorisation from the ODC licence. The ODC permission lets you possess and handle cannabis; the TGA licence lets you manufacture it into a therapeutic good. Cultivation, cutting, and drying may be performed without GMP if the material is used as a starting material for a GMP-licensed downstream facility. First crude extraction may also qualify for this exemption. Anything past first extraction (formulation, encapsulation, packaging, finishing) sits inside the GMP boundary and must be performed by a TGA-licensed manufacturer.

PIC/S Guide to GMP version 17 (PE009-17)

The PIC/S Guide to GMP version 17, formally referenced as PE009-17, took effect on 1 September 2025 as the binding manufacturing standard for medicines in Australia. For non-sterile cannabis manufacturers, the practical change from PE009-16 is minimal: the structural updates concentrated in Annex 1 (sterile manufacturing). Non-sterile producers should still document a gap assessment against PE009-17 in their Quality Management System, but the day-to-day floor-level changes are limited. Sterile manufacturers (anyone producing injectable or sterile-distributed cannabis products) face material changes and should be running a full Annex 1 assessment now if it is not already complete.

TGO 93 Quality Requirements

TGO 93 is the standard the TGA uses to determine whether a cannabis product is safe to release to patients. The numerical limits are tight and are not negotiable. Lab results above any limit constitute a compliance failure regardless of how close the result is to the threshold.

A cannabis lot that passes Health Canada’s microbial limits will not automatically pass TGO 93. The two regimes look similar on paper but rest on different legal bases and different acceptable-tier selections. Never assume cross-jurisdictional parity. If you are importing material from Canada or Europe, the supplier’s certificate of analysis needs to demonstrate compliance against TGO 93 specifically, not against the supplier’s home regulator.

Stability, Expiry, and ARTG Listing

Expiry dates on Australian medicinal cannabis products must be supported by stability data generated in the actual marketed packaging following ICH Q1 principles. A stability programme is an ongoing obligation, not a one-off study at launch. The same logic applies to ARTG listing: products supplied under the Special Access Scheme or Authorised Prescriber Scheme are unregistered, but any product positioned for general Australian Register listing must carry a full ARTG dossier. As of publication, no Schedule 3 (Pharmacist Only) low-dose CBD products have been listed on the ARTG.

GMP, GACP, and Security: Where Cultivation Meets Manufacturing

GMP applies to manufacturers. GACP, Good Agricultural and Collection Practice, applies to cultivators. The two standards interlock through PIC/S GMP Annex 7 (Manufacture of Herbal Medicinal Products), which sets the GACP-to-GMP handover requirements. Australian LPs that span both cultivation and manufacture have to satisfy both regimes simultaneously, and the security overlay on top sits squarely with the ODC.

GMP Requirements for Manufacturers

A working PIC/S GMP system has five components that TGA and ODC inspectors will ask to see. A complete documentation system covering batch records, equipment calibration logs, environmental monitoring, and personnel training. A deviation and CAPA process that produces signed-off root-cause analysis on every issue. Supplier qualification records with documented quality agreements for every starting material. Change control procedures covering any modification to process, equipment, material, or facility. And an annual self-inspection programme with documented findings and corrective action plans. Missing any one of these is enough to fail a GMP audit, and a failed GMP audit can suspend your TGA manufacturing licence.

GACP Requirements for Cultivators

WHO Good Agricultural and Collection Practice for medicinal plants is the agricultural-level standard. For Australian cannabis cultivators the working stack is WHO GACP, TGO 93, and PIC/S GMP Annex 7 read together. Seed and propagation material quality must be documented. Growing conditions, harvest timing, post-harvest handling, and environmental controls all require traceable records. Every fertiliser application, pest-management intervention, and agricultural input has to tie back to a specific harvested batch. Personnel training records with documented competency assessments are mandatory for all cultivation staff, not just QA leads.

ODC Security Requirements

The security overlay is where ODC inspectors spend a disproportionate amount of their time, because security gaps are the easiest non-compliance to verify in person. CCTV must be in operation at all times, with IT backup, covering all cannabis areas, entry and exit points, and perimeters. The facility design itself has to be intruder-resistant per ODC security guidelines. Security overlay plans showing CCTV camera placement, reed switches, motion sensors, and access control points must be current and on file. Every access event at internal and external perimeters has to be logged, including transportation movements with documented chain of custody. The ODC also expects an active working relationship with local law enforcement; police-coordination notes form part of the security file.

How Do Australian LPs Meet INCB Traceability Obligations?

Australia is a signatory to the Single Convention on Narcotic Drugs 1961 and reports licensee-level cannabis quantities to the International Narcotics Control Board through the ODC. That treaty obligation flows down to individual licence holders as a requirement to maintain seed-to-sale traceability across every stage of the supply chain.

What Seed-to-Sale Tracking Actually Means in the Australian Context

Track every cannabis plant from seed or clone to final product with unique batch identifiers at each stage. Record stage transitions across the full sequence: propagation, vegetative, flowering, harvest, drying, curing, processing, and either finished product or destruction. Capture weight at each stage with a timestamp and operator attribution. Maintain room-to-room movement records for every transfer inside the facility. These are not best practices borrowed from another market; they are the data points the ODC quarterly report explicitly asks for, and they feed Australia’s INCB submissions.

Quarterly Reporting Calendar and Cumulative Template

The ODC uses a cumulative quarterly reporting format. Each quarter’s report covers January through the end of that quarter, not just the most recent three months. Q4 is the annual reconciliation. Deadlines are firm:

Each permitted site files separately. A two-site operation submits two quarterly reports per quarter, eight per year. Non-submission, late submission, or false or misleading information can result in infringement notices, additional licence conditions, or licence cancellation. The compounding nature of the cumulative template also means that an error in Q1 propagates into Q2, Q3, and Q4 unless it is corrected.

Audit Trail, Digital Signatures, and Recall Readiness

Beyond the quarterly numbers, every activity has to carry a complete audit trail with user attribution, precise timestamps, and edit or deletion history. Digital signatures are expected on batch records, SOPs, deviation reports, and CAPA sign-offs. Destructions require witnesses, weights, methods, and reasons recorded in a destruction log that reconciles back to the quarterly report. And the ODC and TGA both expect a documented recall procedure that can trace any finished product back to source materials within hours. Mock recall exercises should be run at least annually.

Your Australian Cannabis Compliance Checklist: Priority Actions for 2026

After working through the regulatory map, the practical question is what to fix first. The list below is sequenced by enforcement risk and time-to-fix, not by perceived complexity. Producers who close items one through four in the next 30 days remove most of the avoidable infringement risk; items five through eight take 90 days but materially harden the operation against a poor inspection outcome.

Immediate Actions (Next 30 Days)

1. Run a compliance gap analysis. Compare your current operations line by line against ODC permit conditions, TGO 93 testing requirements, and PIC/S GMP Annex 7. Document the gaps. Assign owners. Set a target close date inside 90 days.
2. Verify your PIC/S GMP v17 (PE009-17) gap assessment. Non-sterile producers should have a documented gap assessment showing the changes from PE009-16 are reviewed and either implemented or assessed as non-applicable. Sterile producers should be in active Annex 1 implementation.
3. Audit your ODC quarterly reporting process before the next deadline. Re-run last quarter’s numbers from raw seed-to-sale data and compare them to what was filed. Any reconciliation gap is a Q4 problem in waiting.
4. Refresh your Fit and Proper Person disclosures. Any change in directors, controlling interests, criminal history, or material adverse information since your last submission needs to be reported.

Near-Term (Next 90 Days)

5. Rebuild your deviation and CAPA system if it is paper-based. GMP inspectors will ask to see active CAPA records with assigned owners and resolution timelines. Spreadsheets do not satisfy this.
6. Audit your security overlay. CCTV coverage gaps, expired access cards, motion sensors offline for more than 72 hours, and security plans that no longer match the floor plan are the most common ODC findings.
7. Run a mock recall. Pick a random finished lot, time how long it takes to trace every source input and every downstream distribution. If it takes more than four hours, your recall SOP needs work.
8. Train every staff member on inspection protocol. The ODC can arrive unannounced. The receptionist, the cultivation team, the packaging line, and the QA team all need to know who to call, what to show, and what to keep confidential.

None of these items is glamorous. All of them appear repeatedly in ODC enforcement notices and TGA observations. The producers who get them right early are the ones who keep their licences when the compliance environment tightens.

Frequently Asked Questions

Get the Complete Australian LP Compliance Checklist

Everything above, plus the printable five-section checklist (ODC licensing, TGA manufacturing, GMP and GACP, INCB traceability, priority actions), every TGO 93 limit in one table, the quarterly reporting calendar, and the security overlay items the ODC flags most often. Drop it straight into your QA folder.

Download Free Guide

Audit-Ready Compliance for Australian Licensed Producers

See how GrowerIQ helps Australian LPs automate ODC quarterly reporting, generate GMP-ready batch records, run deviation and CAPA tracking, and stay inspection-ready across every site and every shift.

REQUEST DEMO