88a0c4fd-d898-4c77-8594-3eeac005d5c3

Substance Control and Public Safety

​​​​​​​​​The care provided in hospitals involves a number of potentially harmful substances, including drugs and nuclear materials. Hospitals are subject to various Acts to ensure these substances are managed and used safely. Some of the Acts in this section require certain records to be maintained. Please refer to the OHA's Records Retention Toolkit: A Guide to the Maintenance and Disposal of Hospital Records for specific details on these compliance requirements. ​

The following Acts are covered in this section: 

Controlled Drugs and Substances Act (CDSA) [federal]

Overview  

The CDSA provides a legislative framework for the control of substances that can alter mental processes and that pose risks to public health and public safety when used inappropriately or diverted to the illegal market. 

Who does the CDSA apply to?   

The CDSA applies to all individuals and organizations, including healthcare facilities such as hospitals, involved in handling controlled substances. 

What are the key requirements for hospitals under the CDSA?   

  • Hospitals cannot possess or produce drugs listed in Schedules I, II, or III except as authorized by regulation under the CDSA. (s 4) 

  • Hospitals must report any loss or theft of controlled substances and precursors to the relevant authorities when there is no reasonable explanation based on normal business activities that exist at the time of discovery, or it is suspected the substance has been diverted to the illegal market. Discrepancies in inventory records that can be reconciled with explanations from other records, inventory counts, or normal documented business practices do not need to be reported. If a loss of controlled substance is explainable by normal business activities, hospitals must retain records, including the name and quantity of the substance and the date and details of the loss. (see compliance deadlines section for specific reporting requirement timelines) 

  • The person in charge of a hospital has specific compliance requirements under the CDSA regulations. (see for example the Narcotics Control Regulations and the Benzodiazepines and Other Targeted Substances Regulations) 

Compliance Deadlines    

Reporting Timelines by Substance Type: 

Substance Type 

Reporting Timelines  

Pinpoint 

Precursors  

Notify the police
within 24 hours
and
Office of Controlled Substances (OCS)
within 72 hours 

Precursor Control Regulations, s 91.96 

Narcotics 

Notify OCS
within 10 calendar days 

Narcotics Control Regulations, s 63(c)   

Targeted Substances (for example: benzodiazepines) 

Notify OCS
within 10 calendar days 

Benzodiazepines and Other Targeted Substances Regulations, ss 61(2), 72(2) 

Controlled Drugs 

Notify OCS
within 10 calendar days 

Food and Drug Regulations, Part G, s G05.004 

Restricted Drugs 

Notify OCS
​within 72 hours 

Food and Drug Regulations, Part J, s J.01.068(1) 


Director Liability  

The Act does not contain any director specific offence provisions. 

Additional Resources 

For more information about the CDSA, please refer to the following resources:  

Overview  

The FDA establishes a framework to ensure the safety, quality, and proper labelling of food, drugs, medical devices, and therapeutic products in Canada. It promotes patient safety by minimizing risks related to contaminated, misbranded, or substandard products used in various settings, including healthcare settings. 

Who does the FDA apply to?  

The Act applies generally to persons (which includes organizations). Additionally, certain provisions within the regulations under the Act apply explicitly to hospitals.  

What are the key requirements for hospitals under the FDA 

  • Hospitals must report all serious adverse drug reactions (ADRs) to Health Canada, even if they occur as a result of off-label use. (CRC c 870, s C01.020.1) To determine if an ADR is “serious,” Heath Canada has advised that hospitals should consider the following:  
    • Has the ADR resulted in or extended in-patient hospitalization, congenital malformation or persistent or significant disability or incapacity?  
    • Is the ADR life threatening or resulted in death?  
    • Does the ADR require medical intervention in order to prevent any of the outcomes above? 

  • ​Hospitals must report any medical device incident (MDI) related to a medical device failure, deterioration in effectiveness, or inadequacy in labeling or directions for use that either led to death or serious health deterioration of a patient, user, or other person, or could lead to such outcomes if the incident were to recur. (SOR/98-282, s 62)  

New Amendment

The FDA was amended in June 2023 to apply to natural health products as the definition of “therapeutic product” was revised in the Act to include natural health products. However, until a date is fixed by order of the Governor in Council, this expanded definition does not apply with respect to hospital reporting obligations when ADRs or MDIs occur.​

Compliance Deadlines  

Hospitals must submit reports of serious ADRs and MDIs to Health Canada within 30 calendar days from the date of first documentation within the hospital. (CRC c870, s C.01.020.1; SOR/98-282, s 62) 

Director Liability  

A director or officer who “directs, authorizes, assents to or acquiesces or participates in the commission of” specified offences is “party to the offence and is liable on conviction to the punishment provided for by this Act, even if the hospital is not prosecuted for the offence”. (s 31.6). Such specified offences include: 

  • Contravention of any provision of the Act relating to therapeutic products, or any orders made under sections 21.1-21.32. (s 31.2) Due diligence is an expressly available defence. (s 31.3) The penalty on conviction by indictment is a fine not exceeding $5 million or to imprisonment for a term not exceeding two years, or both. The penalty on summary conviction is, for a first offence, a fine not exceeding $250,000 or to imprisonment for a term not exceeding six months, or both, and for a subsequent offence, a fine not exceeding $500,000 or to imprisonment for a term not exceeding 18 months, or both. (s 31.2)  

  • Knowingly making a false or misleading statement to the federal Minister of Health (Minister) or knowingly providing the Minister with false or misleading information in connection with any matter under the Act concerning therapeutic products (s 21.6). (s 31.4) Due diligence is an expressly prohibited defence. (s 31.3) The penalty on conviction by indictment is a fine which is at the discretion of the court or to imprisonment for a term not exceeding five years, or both. The penalty on summary conviction is, for a first offence, a fine not exceeding $500,000 or to imprisonment for a term not exceeding 18 months, or both, and for a subsequent offence, a fine not exceeding $1 million or to imprisonment for a term not exceeding two years, or both. (s 31.4) 

Additional Resources 

For more information about the FDA, please refer to the following resource 

Overview  

The NSAA was introduced with the purpose of monitoring prescribing and dispensing of narcotics and other monitored drugs, in order to contribute to appropriate practices. The NSAA is largely aimed at controlling inappropriate use, misuse, and diversion practices.  

Who does the NSAA apply to?   

The NSAA applies primarily to “prescribers” and “dispensers” of monitored drugs. That said, the NSAA also applies to “operators of a pharmacy” which includes pharmacies “operated in or by a hospital to which the Public Hospitals Act applies”. The NSAA therefore applies to hospitals if they operate pharmacies. For greater clarity, the NSAA does not apply to prescribing and/or dispensing to “in-patients” within the meaning of the Public Hospitals Act.  

What are the key requirements for hospitals under the NSAA?  

  • Hospitals operating pharmacies must ensure every dispenser employed or retained by the pharmacy complies with the provisions of the Act. (s 12)  

  • Hospitals operating pharmacies must comply with ministerial and/or Ontario Drug Benefit Act executive officer requests for the disclosure of personal information collected by a prescriber or dispenser as required by the Act and regulations. (ss 8-11)  

  • Hospitals operating pharmacies must accommodate inspectors, operating within their scope, if appointed under the Act. (ss 13-14)  

Compliance Deadlines  

The Act does not contain any compliance deadlines. 

Director Liability  

The Act does not contain any director specific offence provisions. 

Additional Resources 

For more information about the NSAA, please refer to the following resource:  

Overview  

For the purpose of this Guide, the NSCA establishes a comprehensive framework governing the possession, use, transfer, import, export, abandonment and storage of nuclear substances and radiation devices. In doing so, the NSCA establishes the Canadian Nuclear Safety Commission (Commission) and tasks it with the oversight and administration of the Act. One of the primary vehicles with which the Commission regulates the possession and use of nuclear substances and radiation devices is through a licensing scheme. This licensing scheme generally captures hospitals.   

Who does the NSCA apply to?   

The NSCA applies to those who receive a “licence” from the Commission. This includes hospitals, to the extent that they undertake licensed activities. 

What are the key requirements for hospitals under the NSCA?  

  • Hospitals that undertake licensed activities must acquire and maintain a licence in accordance with the requirements of the Act and regulations. (ss 24-26; SOR/2000-202, ss 3-12) 

  • Hospital licensees must keep radiation dosing records in accordance with the Act and regulations. (s 27; SOR/2000-202, s 27; SOR/2000-209, ss 36-37) 

  • Hospital licensees must keep a record of all information submitted to the Commission relating to its licence in accordance with the Act and regulations. (s 27; SOR/2000-202, s 27) 

  • Hospital licensees must report any theft or loss of nuclear substances or other contravention of the Act in accordance with the Act and regulations. (s 27; SOR/2000-202, ss 29-31; SOR/2000-209, s 38) 

  • Hospital licensees must ensure radiation devices are certified by the Commission in accordance with the Act and regulations. (SOR/2000-209, ss 11-12) 

  • Hospital licensees must make copies of radiation safety and accidents, including fires and spills, available to all workers. (SOR/2000-209, s 17)  

Compliance Deadlines  

  • A hospital licensee must immediately make a report to the Commission respecting specified circumstances and a full report respecting the same specified circumstances, within 21 days after becoming aware of the circumstances in accordance with the Act and regulations. (SOR/2000-200, ss 29-30)  

  • A hospital licensee aware of an inaccuracy or incompleteness of a record required to be kept, must file a report of the inaccuracy of incompleteness with the Commission within 21 days of becoming aware of it in compliance with the Act and regulations. (SOR/2000-202, s 31)  

  • A hospital licensee may not dispose of any record referred to in the Act and regulations unless the record is no longer required to be kept, and the Commission has been notified in accordance with the Act and regulations at least 90 days before the date of disposal. (SOR/2000-202, s 28)  

Director Liability  

Any director or officer who “directed, authorized, assented to, acquiesced in or participated in” the commission of a violation under the Act is liable to an administrative monetary penalty determined in accordance with the respective regulation, which is not to exceed $25,000. (ss 65.03, 44(13))  

The NSCA explicitly provides for a limited statutory due diligence defence. (s 51.1) 

Additional Resources 

For more information about the NSCA, please refer to the following resources:  

Overview  

The TDGA and its regulations take aim at ensuring public safety when dangerous goods (as defined in the Act and regulations) are imported, offered for transport, handled or transported by road, rail, or water. The compliance requirements under the TDGA should be considered in close connection with those contained in Ontario’s Environmental Protection Act (EPA) and its regulations. The EPA, among other things, outlines additional responsibilities and requirements for generators of biomedical waste.  

Who does the TDGA apply to?   

For the purposes of this resource, the TDGA applies to anyone handling dangerous goods where handling is defined under the Act as “loading, unloading, packing or unpacking dangerous goods in a means of containment for the purposes of, in the course of or following transportation and includes storing them in the course of transportation”.  

What are the key requirements for hospitals under the TDGA?  

  • ​Hospitals must not handle or transport dangerous goods in non-compliance with the Act and its according regulations. (s 2; SOR/2001-286, Part 2, Schedule 1) 

  • Hospitals must not transport dangerous goods between owned or leased properties except in compliance with the specified regulatory exemptions. (SOR/2001-286, s 1.28)
     
  • Hospitals must ensure any staff handling dangerous goods are adequately trained and hold a training certificate in compliance with the Act and regulations. (s 2; SOR/2001-286, Part 6)  

  • Hospitals must, if required under the Act and regulations, have compliant emergency response assistance plans and security plans. (ss 7, 7.3; SOR/2001-286)  

  • Hospitals must submit required reports under the regulations as may be applicable. (SOR/2001-286, Part 8) 

  • ​Hospitals must register with Transport Canada’s Client Identification Database (CID) in accordance with regulatory requirements. (SOR/2001-286, s 17.3)  

Compliance Deadlines  

  • Hospitals employing individuals required to have a security training certificate must provide a copy of the training certificate within 15 days of a written request by an inspector. (SOR/2001-286, s 6.7) 

  • Hospitals must comply with a series of compliance deadlines respecting various reporting requirements under Part 8 of regulation. (SOR/2001-286)   

  • Hospitals mu​st renew their CID registration annually within 30 days of the anniversary date of their initial registration. (SOR/2001-286, s 17.4)  

Director Liability  

Under the TDGA, any director who “directed, authorized, assented to, acquiesced in or participated in the commission of the offence is a party to and guilty of the offence and is liable on conviction to the punishment provided for the offence”. (s 39) Section 33 further clarifies that offences under the Act a​nd regulations may result in fines not exceeding $50,000 for first offences and $100,000 for subsequent offences; or imprisonment for a term not exceeding two years. (s 33)  

That said, the TDGA includes an explicit due diligence defence provision confirming that no person will be found guilty of an offence if “the person took all reasonable measures to comply with this Act or to prevent the commission of the offence”. (s 40)  

Additional Resources 

Keep me informed graphic

Stay up to date on this subject and all other OHA news and activities.

Keep me informed