A Possession for Manufacture licence is half the picture. Medsafe GMP is the other half, and it must be in place before any therapeutic product leaves the door.
NZ cannabis GMP Medsafe requirements sit on top of the Medicinal Cannabis Agency licence framework, not in place of it. Any operator processing dried cannabis, extracting cannabis based ingredients, or manufacturing finished medicinal products holds a Possession for Manufacture licence under the Misuse of Drugs (Medicinal Cannabis) Regulations 2019 AND a Medsafe licence under the Medicines Act 1981. This article walks through the two layered licence structure, the GMP code that applies, and the evidence Medsafe expects to see during inspection.
For the full regulatory framework including the other four licence activity types and MQS verification, our complete NZ Medicinal Cannabis Compliance Checklist covers cultivation, manufacture, supply, nursery, and research end to end.
What Are NZ Cannabis GMP Medsafe Requirements and Who Needs Them?
Medsafe is the New Zealand Medicines and Medical Devices Safety Authority, a business unit of Manatu Hauora (Ministry of Health). Medsafe administers the Medicines Act 1981 and the NZ Code of Good Manufacturing Practice for Manufacture and Distribution of Therapeutic Goods. Every operator manufacturing medicines for the New Zealand market needs a Medsafe licence, and the manufacturing site needs to demonstrate compliance with the GMP code through inspection.
For cannabis specifically, the trigger is the licence activity type. Of the five activity types administered by the MCA under Regulation 22 (cultivation, nursery, possession for manufacture, supply, research), only Possession for Manufacture engages Medsafe. The other activities, cultivation under GACP cultivation requirements, supply against the Minimum Quality Standard, or export, do not require a Medsafe manufacturing licence. They engage MCA, customs, and security frameworks instead. See NZ medicinal cannabis licence requirements for the full breakdown of which activities trigger which regulator.
The practical implication: if you are processing dried biomass, running extraction, formulating oils or capsules, packaging finished products, or running release testing inside a manufacturing site, Medsafe applies. If you are growing only and shipping unprocessed dried flower or starting material to another licence holder for processing, Medsafe does not apply to you, GACP and MCA cultivation requirements do.
Which Medsafe Licences Do Cannabis Manufacturers Need?
Medsafe issues two distinct manufacturing licence types under section 17 of the Medicines Act 1981. A cannabis manufacturer may need one, the other, or both depending on activities performed at the site.
| Licence type | Medsafe scope | When required |
|---|---|---|
| Licence to Manufacture Medicines | Authorises manufacture of medicines including extraction, formulation, fill, finishing, and primary packaging | Required for any site performing extraction or producing a dosage form (oil, capsule, oromucosal spray, topical) |
| Licence to Pack Medicines | Authorises secondary packaging, labelling, and assembly of finished medicines from bulk supplied by another licence holder | Required for sites that only repack or relabel bulk products supplied by a third party manufacturer |
An operator running a vertically integrated facility, taking dried cannabis through extraction, formulation, fill, AND final pack, typically holds the Licence to Manufacture Medicines because that scope covers the packaging activity that follows manufacture. An operator that only packs bulk oil supplied by another GMP licensed manufacturer needs only the Licence to Pack Medicines. A contract packer that handles both finished product packaging for one client AND repacks bulk for another may need both licences listed against the same site.
The Medsafe licence is site specific and activity specific. Adding a new dosage form, a new extraction technology, or a new building on the same campus may require a variation or a new licence application. The licence schedule lists exactly what the site is authorised to do, and operating outside that schedule is a breach even if the manufacturer holds the broader MCA Possession for Manufacture licence.
What Does the NZ Code of GMP Require for Cannabis Products?
The applicable code is the NZ Code of Good Manufacturing Practice for Manufacture and Distribution of Therapeutic Goods, published by Medsafe in the NZ Regulatory Guidelines for Medicines. The code is principles based and aligns broadly with PIC/S GMP. For cannabis specifically, the practical evidence buckets a Medsafe inspector will look for are documented quality systems, validated processes, controlled premises, and traceable batch records.
Pharmacopoeia alignment matters because the Minimum Quality Standard requires testing against European Pharmacopoeia methods for microbiological contamination, heavy metals, pesticides, aflatoxins and ochratoxin A, residual solvents, and active ingredient assay. A GMP manufacturing site needs analytical methods that produce results comparable to a GMP certified laboratory running Ph. Eur. methods. That alignment is part of what the inspector verifies.
The principal evidence categories the GMP code drives:
- Quality management. Documented quality manual, defined responsibilities, internal audit program, management review.
- Personnel and training. Qualified staff with documented job descriptions, training records, and a named QA person responsible for batch release.
- Premises and equipment. Manufacturing areas designed to prevent cross contamination, qualified equipment, calibration program, validated cleaning.
- Documentation. Master formulae, master batch records, SOPs, standard test procedures, all under change control.
- Production and process controls. Process validation, in process controls, environmental monitoring, deviation handling.
- Quality control. Validated analytical methods, sampling plans, retained samples, stability program.
- Distribution and recall. Controlled distribution records, recall procedure, complaint handling.
The cannabis specific overlay sits in a few categories. Cross contamination risk is high because most cannabis manufacturers handle multiple cultivars and multiple THC strengths in shared equipment. Cleaning validation and changeover procedures need to demonstrate that residue carryover from one batch does not affect the next. Active ingredient assay validation has to cover the range of cannabinoid concentrations produced at the site, not just one reference strength.
How Does a Cannabis QMS Meet Medsafe Expectations?
The quality management system is the single largest piece of evidence Medsafe inspects. A workable QMS for a cannabis manufacturer covers at least seven core elements, each with documented procedures, training records, and an audit trail.
| QMS element | What it covers | Cannabis specific notes |
|---|---|---|
| CAPA (Corrective and Preventive Action) | Root cause investigation and corrective action for deviations, complaints, audit findings | Common triggers: out of spec assay, pesticide detection in finished product, label mix up between strengths |
| Change control | Formal review and approval before any change to validated processes, equipment, suppliers, or specifications | Cultivar changes, extraction solvent changes, and label changes all flow through change control |
| Deviation management | Documented record of any departure from procedure, with investigation and disposition | Deviations on cannabinoid recovery yield are the most common, often traced to starting material moisture variability |
| Process validation | Documented evidence that the manufacturing process consistently produces product meeting predetermined specifications | Three consecutive successful batches at commercial scale is the typical baseline; revalidate after major change |
| Cleaning validation | Documented evidence that cleaning procedures remove product residue, cleaning agent, and microbial contamination to acceptable limits | Worst case bracketing across strengths and cultivars saves repeat validation |
| Analytical method validation | Documented evidence that analytical methods are specific, accurate, precise, and robust for the intended use | Cannabinoid potency methods need to handle the matrix (oil, capsule, dried flower) not just the reference standard |
| Supplier qualification | Documented assessment of every supplier of starting material, packaging, and analytical services | Cultivation suppliers need GACP evidence; analytical labs need GMP certification or ISO 17025 accreditation |
The QMS is not a one off project. Each element generates ongoing records that the inspector samples during the site audit. Three consecutive deviation reports with no CAPA, an open change control older than 90 days, or a missing supplier requalification are the kinds of findings that delay a Medsafe certificate.
What Batch Record and Environmental Monitoring Evidence Does GMP Require?
Two evidence streams come up in every Medsafe cannabis inspection: batch manufacturing records and environmental monitoring data. Both have to be contemporaneous, attributable, legible, and retrievable. Paper records are still legal but are increasingly rare at scale because the volume of records generated and the audit cost of reconciling paper to ERP data make digital the practical default.
Batch records with electronic signatures
A complete batch record covers every step from starting material receipt to final release. Minimum content:
- Master batch number and product name, dosage form, and strength
- Starting material lot numbers, weights, and certificates of analysis
- Equipment used, with cleaning record references
- Process steps with operator initials and timestamps
- In process control results with reviewer signatures
- Yield calculations at each major step
- Deviations, with investigation references
- Final QA review, batch disposition, and release signature
Electronic signatures in NZ GMP follow the same data integrity expectations as PIC/S Annex 11: linked to the signer, captured with date and time, retained against the record, and not modifiable without an audit trail entry. Free text PDF or spreadsheet records do not meet these requirements without a layer of access control and audit trail. Most cannabis manufacturers running at scale use a validated electronic batch record system that covers the data integrity expectations natively.
Environmental monitoring
The GMP code requires temperature, humidity, and particulate monitoring in manufacturing areas. For cannabis the monitoring footprint typically covers:
- Drying and curing rooms: Temperature 18 to 22 C, relative humidity 55 to 65 percent, with continuous logging
- Extraction suite: Temperature, humidity, and (if applicable) solvent vapour monitoring
- Formulation and fill rooms: Temperature, humidity, and particulate counts at defined sampling points
- Quarantine and finished product storage: Temperature controlled, with deviation alarms
Particulate monitoring uses ISO 14644 grade classifications. Most cannabis dosage forms (oils, capsules, oromucosal sprays) are not sterile and run in graded clean areas rather than aseptic suites. A typical fill room runs at ISO 8 in operation (Grade D under EU GMP nomenclature), with critical fill points at ISO 7. Sterile dosage forms (eye drops, injectables) are explicitly prohibited under the NZ Medicinal Cannabis Scheme product list, so the aseptic Grade A and Grade B environments do not normally apply to cannabis.
The monitoring system needs to be qualified, calibrated annually, and produce reports that are reviewed and signed. Trending of environmental data is the part that most often gets missed: collecting the data is the easy step, demonstrating that excursions are investigated and that the trend remains within control is what the inspector audits. See NZ cannabis GACP cultivation requirements for the equivalent monitoring expectations on the cultivation side.
Frequently Asked Questions
Does an MCA Possession for Manufacture licence include Medsafe GMP?
No. The two licences are separate and issued by different regulators. The MCA Possession for Manufacture licence under the Misuse of Drugs (Medicinal Cannabis) Regulations 2019 authorises possession and processing of controlled drug material. The Medsafe Licence to Manufacture Medicines under the Medicines Act 1981 authorises manufacture of therapeutic goods. A cannabis manufacturer needs both. Holding only one is insufficient to legally produce finished medicinal cannabis products in New Zealand.
Which version of GMP applies to cannabis manufacturing in NZ?
The applicable code is the NZ Code of Good Manufacturing Practice for Manufacture and Distribution of Therapeutic Goods, published by Medsafe within the NZ Regulatory Guidelines for Medicines. The code is principles based and aligns broadly with the PIC/S GMP guide. For testing methodology, the Minimum Quality Standard requires alignment with European Pharmacopoeia methods. There is no separate cannabis specific GMP code in New Zealand: the same medicines GMP applies, with practical adaptation to the cannabis matrix.
Can a contract manufacturer hold the Medsafe licence on behalf of a brand owner?
Yes. The Medsafe Licence to Manufacture Medicines and the Licence to Pack Medicines are issued to the site, not to the brand owner. A contract manufacturer holding the licence can produce or package products on behalf of multiple brand owners, provided the technical agreement assigns clear responsibilities for batch release, complaint handling, and product recall. The brand owner remains responsible for the product on the market under the Medicines Act, but the manufacturing GMP responsibility sits with the licensed site.
Did the Medicines Amendment Act 2025 change cannabis GMP requirements?
The Medicines Amendment Act 2025 amended the rules around advertising of prescription medicines at conferences (effective July 2025), but did not change the underlying GMP manufacturing requirements for cannabis or any other therapeutic product. The NZ Code of GMP and the Licence to Manufacture Medicines framework under section 17 of the Medicines Act 1981 remain in force unchanged. Manufacturers should track the joint Medsafe and MCA Advertising Guidance published July 2025 for the practical effect on conference activity.
Get the Full NZ Medicinal Cannabis Compliance Checklist
Everything you just read on Medsafe GMP, plus GACP cultivation, MQS verification, security obligations, the 5 licence activity types, and the July 2024 export amendments. One PDF, every requirement, no marketing fluff.
Download Free Guide
Recommended For You
Germany’s Cannabis Market Hits EUR 670M: How 900,000 Patients Are Reshaping Europe’s Largest Market
April 17, 2026Mexico’s Cannabis Gray Market: Legal Personal Use but No Commercial Framework in Sight
April 16, 2026Germany’s Pillar 2 Stalls: Why Commercial Cannabis Retail May Not Arrive Until 2027
April 15, 2026About GrowerIQ
GrowerIQ is changing the way producers use software - transforming a regulatory requirement into a robust platform to learn, analyze, and improve performance.
To find out more about GrowerIQ and how we can help, fill out the form to the right, start a chat, or contact us.