CFIA Enforcement Actions: A Practical Guide for Food Companies

What happens when the Agency shows up, and what to do about it.

Most food companies will interact with the Canadian Food Inspection Agency at some point. For many, that interaction is routine: a scheduled inspection, a licence renewal, a labelling question. For some, it is not routine at all.

When CFIA takes enforcement action, things tend to move quickly. An inspection can generate compliance orders the same day. An Administrative Monetary Penalty notice arrives with a fixed response window. Even a voluntary recall compresses weeks of operational decisions into days or hours. The common thread is that the company’s initial response (what it does and says in the first few days) tends to define the trajectory of everything that follows.

This page is a practitioner’s overview of how CFIA enforcement actually works: what triggers it, what tools the Agency uses, what your rights and obligations are, and where legal counsel fits into the picture. It is not a substitute for legal advice on a specific matter, but it should give you a working understanding of the framework before you need to call anyone.

What Triggers CFIA Enforcement

CFIA does not enforce randomly. Enforcement actions typically originate from one of a handful of sources:

  • Routine inspections: CFIA allocates inspection resources using an internal framework called the Establishment-based Risk Assessment (ERA) model. The ERA assigns a risk score to each licensed establishment based on factors including product type, volume, compliance history, and the adequacy of the facility’s preventive control plan. Higher-risk scores mean more frequent inspections. The ERA is CFIA operational policy, not statute, but we wrote about how the model works and where it breaks down here.

  • Consumer or competitor complaints: A complaint to CFIA, about a labelling claim, an undeclared allergen, a product that made someone sick, can trigger an investigation. The Agency is not required to disclose the identity of the complainant, and in practice it rarely does.

  • Import refusals and border holds: Products entering Canada are subject to inspection at the border. A refusal or hold can escalate to a broader investigation of the importer’s compliance practices, particularly if the issue is systemic (recurring allergen failures, unapproved additives, misleading country-of-origin claims).

  • Adverse event reports and food safety signals: Reports of illness linked to a food product will trigger an investigation, often in coordination with the Public Health Agency of Canada and provincial health authorities. These investigations move on a public health timeline, which is faster than a regulatory one.

  • Marketplace surveillance: CFIA conducts targeted surveillance programs wherein it samples products off retail shelves to test for undeclared allergens, chemical contaminants, microbiological hazards, or labelling accuracy. A failed test result can be the first indication a company receives that there is a problem.

  • Referrals from other agencies: Health Canada, the Competition Bureau, the Canada Border Services Agency, and provincial regulators all refer matters to CFIA when they identify food safety or food fraud issues within CFIA’s jurisdiction.

Not every trigger leads to enforcement. Many inspections result in observations and corrective action requests that are resolved cooperatively. The question is what happens when they are not.

The Enforcement Toolkit

CFIA has a graduated set of enforcement tools, drawn from the Safe Food for Canadians Act (SFCA), the Canadian Food Inspection Agency Act, and the Agriculture and Agri-food Administrative Monetary Penalties Act. In ascending order of severity:

Inspection Orders and Directions

The most common enforcement instrument. An inspector who identifies non-compliance during an inspection can issue written orders directing the company to take corrective action: remove a product from sale, re-label inventory, implement a corrective action plan, suspend a process. These orders are issued under the inspector’s authority and take effect immediately. There is no pre-order hearing.

The practical consequence: inventory may be detained, production may be halted, and the company is expected to respond in writing within a defined (and often short) timeframe. The company’s written response to the initial order becomes part of the compliance file and can influence every subsequent interaction with the Agency on the matter. We have seen cases where a poorly worded initial response, often written in haste and without legal input, became the Agency’s framing of the issue for the duration of the file.

Administrative Monetary Penalties (AMPs)

AMPs are monetary penalties imposed for violations of the SFCA, the SFCR, or the Food and Drugs Act and its regulations. The penalty ranges depend on the classification of the violation: the Agriculture and Agri-Food Administrative Monetary Penalties Act (AAAMP Act) sets statutory ceilings of $5,000 per violation for minor violations, $15,000 for serious, and $25,000 for very serious. Actual penalty amounts are calculated under the Regulations through a gravity-value system that accounts for compliance history, degree of intent, and harm. Each day of a continuing violation constitutes a separate violation (AAAMP Act, s. 21), which means the arithmetic on a systemic issue can accumulate quickly.

Two things about AMPs that companies routinely underestimate. First, CFIA issues AMPs through a notice-of-violation process. The company receives a Notice of Violation specifying the alleged violation, the penalty amount, and the options for response: pay the penalty, request a compliance agreement, request a review by the Minister, or request a review by the Canada Agricultural Review Tribunal (CART). The response window is 30 days from service of the notice. If the company does not respond within that window, it is deemed to have committed the violation and the penalty becomes payable. The deemed-commission mechanism is unforgiving.

Second, the penalty amount is often less significant than the compliance record it creates. Even a minor AMP is a rounding error for most food companies. But the violation on your compliance record affects your ERA risk score (compliance history is one of the gravity-value factors), your inspection frequency, your ability to resolve future issues informally, and - if you are a publicly traded company or a subsidiary of one - your disclosure obligations. We have seen companies fight a modest penalty not because the money mattered but because the compliance history consequence did. The long tail of a violation matters more than the fine.

See AMP Challenges: Responding to a CFIA Notice of Violation.

Licence Suspension or Cancellation

CFIA can suspend or cancel an establishment’s licence under the SFCR. Suspension is typically used where there is an immediate food safety risk or a persistent failure to comply with conditions of licence. Cancellation is the end of the road. Once a licence is cancelled, the establishment can no longer legally operate until it applies for and receives a new one, often with significant sanctions or limitations.

The Minister has the power to suspend or cancel a licence under the SFCA (s. 22). In the standard case, the SFCR requires that the licence holder receive a written report of the grounds and a period to take corrective action before suspension takes effect (SFCR, s. 36). The quality of the company’s response during that corrective-action window matters enormously, because it is often the only opportunity the company has to present its version of events before the Agency makes its decision.

The exception is where CFIA determines there is a risk of injury to human health. In that case, the Agency can suspend immediately (SFCR, s. 37). If you receive a suspension notice citing health risk, you are already suspended. If corrective action is not completed within 90 days of suspension (or such longer period as the Minister may grant on written request), cancellation may follow (SFCR, s. 39).

Directed Recalls

When CFIA determines that a food product presents a risk to health or safety, it can order a recall under s. 19(1) of the Canadian Food Inspection Agency Act. (The SFCA, at s. 5, prohibits the sale of a product subject to a recall order.) The classification system below is CFIA policy, not statute, but it drives how the Agency manages the recall operationally. Recalls are classified by severity:

  • Class I: Reasonable probability of serious adverse health consequences or death. This is where most undeclared allergen recalls land, even where no illnesses have been reported.

  • Class II: Temporary adverse health consequences, or remote probability of serious consequences.

  • Class III: Not likely to cause adverse health consequences. Typically labelling or composition issues without a direct safety dimension.

The Agency’s default is caution. We have seen companies argue for a lower classification than CFIA initially proposed; it can work, but only with evidence, not with rhetoric. Companies that push for a lower class without strong data to support the argument tend to lose credibility rather than gain a concession.

A directed recall triggers a cascade of operational requirements: consumer notification, trade notification, product retrieval, effectiveness checks, root cause analysis, and a corrective action plan. The company is expected to execute the recall under CFIA oversight. Delays or inadequacies in execution can escalate the matter from a compliance issue to an enforcement one.

See Product Recalls: A Practical Guide

Prosecution

Criminal prosecution under the SFCA or the Food and Drugs Act is CFIA’s most severe enforcement tool and is used rarely. CFIA refers cases; prosecutions are conducted by the Public Prosecution Service of Canada. The cases that get referred typically involve fraud, deliberate adulteration, or conduct so far outside the norms that administrative tools are inadequate.

The practical relevance of the prosecution power is less about the likelihood of charges and more about the shadow it casts over enforcement negotiations. When CFIA is investigating a matter that could theoretically support a referral to PPSC, the company’s communications with the Agency take on a different character. Anything you say or write during the investigation can end up in a prosecution brief. This is not a reason to refuse to cooperate with CFIA (non-cooperation carries its own risks), but it is a reason to have counsel involved before anyone drafts a response.

The First 72 Hours

When a company receives a CFIA enforcement notice - an inspection order, an AMP notice, a recall direction - the instinct is usually to fix the immediate problem as fast as possible. That instinct is correct but incomplete. The first 72 hours are also when the most consequential decisions about how to engage with the Agency are made, often without legal input.

Here is what the first 72 hours should look like:

  1. Identify what authority CFIA is exercising. Read the notice carefully. Is it a s.24 inspector’s order under the SFCA? An AMP notice of violation under the AAAMP Act? A recall order under the CFIA Act? A s. 27 production order? Each instrument carries different response obligations, different timelines, and different review rights. Regulated parties sometimes treat all CFIA communications as equivalent; they are not.

  2. Preserve records immediately. Whatever triggered the enforcement action (inspection reports, production records, lab results, correspondence with CFIA, internal emails about the issue, e.g.) needs to be preserved. Do not edit, delete, or “clean up” any documents related to the matter. If there is any possibility of prosecution, document preservation is not optional.

  3. Assess the scope. Is this a single-product issue or a systemic one? Does it affect one facility or multiple? Are there co-manufacturers, suppliers, or distribution partners who need to be notified? Understanding the scope early determines whether this is a contained compliance issue or something that requires a coordinated response across the supply chain.

  4. Do not negotiate your own response timeline. If CFIA has set a response deadline that is genuinely unworkable, it is possible to request an extension - but the request needs to be made properly, with reasons, and early. Blowing past a deadline without communication is one of the fastest ways to escalate a matter from cooperative to adversarial.

  5. Get legal advice before submitting your written response. The written response to a CFIA enforcement notice is the single most important document in the file. It establishes the company’s position, frames the narrative, and becomes part of the permanent compliance record. It should not be drafted by the production manager on a Friday afternoon. Candidly, this is not a sales pitch. It is a pattern we see repeatedly: the first written response, drafted under time pressure without legal review, creates problems that take months to unwind.

CFIA Enforcement Response Checklist

For general guidance only. Not a substitute for legal advice on a specific matter.

Immediate (Day 1)

☐ Read the enforcement notice in full - identify the statutory authority, the specific violations alleged, and the response deadline

☐ Notify senior management and (if applicable) in-house counsel or the board

☐ Implement a document preservation hold on all records related to the matter

☐ Identify the CFIA inspector or officer assigned to the matter

☐ Do not make oral or written admissions before obtaining legal advice

Within 72 HOURS

☐ Retain external legal counsel experienced in CFIA enforcement matters

☐ Assess the scope: single product, single facility, or systemic issue?

☐ Identify co-manufacturers, suppliers, or distribution partners who may be affected

☐ Begin assembling the factual record: inspection reports, production logs, PCP documents, lab results, prior CFIA correspondence

☐ If a recall is directed: initiate recall procedures, prepare consumer and trade notifications

☐ If an AMP is issued: calendar the 30-day response deadline and assess review options (pay, compliance agreement, Ministerial review, or CART)

Within 30 DAYS

☐ Submit written response to CFIA (drafted or reviewed by counsel)

☐ If AMP: elect to pay, request a compliance agreement, request Ministerial review, or request CART review

☐ Implement immediate corrective actions and document them

☐ Prepare root cause analysis

☐ Update preventive control plan if the matter reveals a gap

Ongoing

☐ Maintain a log of all communications with CFIA on the matter

☐ Monitor for any related enforcement activity (recalls in the same product category, CFIA advisories)

☐ Review and update the facility’s ERA risk factors if the matter affects compliance history

Where Legal Counsel Fits

Not every CFIA interaction requires a lawyer. Routine inspections, minor labelling corrections, voluntary corrective actions - these are operational matters that most food companies handle competently in-house.

Legal counsel becomes material when:

  • The enforcement action carries financial or operational consequences that extend beyond the immediate issue (licence suspension, significant AMPs, recall of a high-volume product line, elevated risk profile with Canadian or foreign regulators)

  • The matter involves potential prosecution risk (fraud allegations, deliberate non-compliance, serious food safety failures resulting in illness or death)

  • The company’s written response to CFIA will establish a position that is difficult to walk back

  • The enforcement action triggers obligations to other parties - insurers, co-manufacturers, retail customers, shareholders, or foreign regulators

  • There is a dispute about the facts or the legal basis for the Agency’s action

We have acted as counsel to entities on the food value chain on CFIA enforcement matters since 2013. The firm’s practice covers the full range of enforcement instruments: inspection disputes, AMP challenges before the Canada Agricultural Review Tribunal, licence proceedings, recall classification and management, and regulatory investigations. We also advise on the compliance architecture that reduces enforcement risk in the first place: preventive control plans, supplier verification programs, and internal audit frameworks.

If you are dealing with a CFIA enforcement matter and want to discuss your options, contact us at info@gsjameson.com or +1 (647) 638-3994.

Primary Authorities

Last updated: March 2026. This page is maintained by GSJ&Co. and updated when there are material changes to CFIA enforcement practice or the governing legislation.