Import & compliance
What does CFIA require of food importers beyond the licence?
Holding a Safe Food for Canadians (SFC) licence is the starting point, not the whole job. CFIA also expects licensed food importers to maintain a written preventive control plan (PCP) — documentation showing how you verify that your foreign supplier's food is safe and meets Canadian requirements — plus a traceability system that can track a product one step back to its supplier and one step forward to its customer (inspection.canada.ca).
Both requirements exist so that if something goes wrong — a contamination scare, a mislabelled allergen, a supplier issue — the problem can be traced and contained quickly rather than discovered too late. See Do you need a licence to import food into Canada? for the licensing step itself.
The preventive control plan: proving your supply chain is accountable
A PCP is the written record of how you, as the importer, confirm that food is being manufactured, prepared, stored, packaged and labelled by your foreign supplier under conditions equivalent to what's required in Canada (inspection.canada.ca/en/food-safety-industry/preventive-control-plans/importers). In practice, that means documenting your supplier relationships, how you assess and monitor them, and what you'd do if a hazard turned up — an ongoing file, not a single form.
For a small or first-time importer, this is often the part that takes longest to build properly, and it's a large part of why CFIA's own licence timelines assume weeks rather than days. A PCP that names real suppliers, describes real verification steps and gets revisited as the business changes is worth far more, in practice, than one written once to satisfy an application and then left untouched.
Traceability: one step back, one step forward
Part 5 of the Safe Food for Canadians Regulations requires licensed food businesses to be able to trace a lot of product one step back to their immediate supplier and one step forward to their immediate customer (inspection.canada.ca/en/food-safety-industry/toolkit-food-businesses/traceability-requirements). That's the mechanism that makes a recall workable — it lets a business narrow a problem to a specific batch and specific customers instead of pulling everything with that name on it. What are traceability and recall basics for food businesses? covers what this looks like once product is moving.
For buyers further down the chain — restaurants, grocers, cafés — the practical takeaway is smaller: keep your own receiving records (supplier, date, lot or batch reference where given) so that if a recall notice ever lands, you can identify what you have and where it came from without a scramble. That habit costs almost nothing to maintain day to day and is exactly what turns a recall notice into a quick shelf check instead of a guessing exercise.
Recall readiness isn't optional once you're licensed
If a safety issue is found — through a complaint, testing, or CFIA's own inspection activity — a licensed importer is expected to be able to act on it immediately, and to notify CFIA without delay if the food poses a risk to health (inspection.canada.ca). That obligation sits with the licence holder, but it's a good reminder for any buyer to choose suppliers who can speak plainly about how they'd handle a recall, not just about their product range. Ask a prospective supplier directly how a recall would move through their business — it's a fair question, and a supplier with a real PCP and traceability system in place will usually answer it without hesitation.
Related questions
Do I need a PCP if I only buy from a Canadian wholesale supplier?
No — the preventive control plan requirement applies to the licensed importer of record, not to domestic customers buying already-landed stock. See buy from a licensed Canadian importer.
What records should a restaurant or grocer keep, even without a licence?
Basic receiving records — supplier name, delivery date and any lot or batch information provided — are good practice for any food business and make responding to a supplier recall notice much faster.
Does the PCP have to be reviewed once it's written?
CFIA's guidance treats a PCP as something to keep current, not a document you file once and forget — reflecting real changes in suppliers or hazards over time. Confirm current expectations for your situation directly with CFIA.
Is this legal advice?
No. This is general regulatory guidance for GTA food buyers, not legal advice. Confirm specifics with the CFIA before setting up compliance documentation.