CBPM Supply Chain in the UK: WDA, Specials, and the Continuity Question

For clinic managers, pharmacists, procurement leads and distribution partners: this article walks through the regulated supply chain that sits behind every CBPM dispensed in the UK — the authorisations involved, where Qualified Person (QP) responsibility lies, what an MHRA inspector typically asks for, and how clinics build redundancy against single-source supply risk. It is a regulatory and operational overview, not product promotion.

The authorisations that make a UK CBPM supply chain lawful

A compliant CBPM supply route requires several authorisations operating in parallel. Missing any one of them is not a paperwork issue — it is the difference between a lawful and an unlawful supply chain.

• Wholesale Distribution Authorisation for Human Medicines (WDA(H)), issued by the MHRA, is required for any organisation procuring, holding or supplying medicines for onward distribution. For CBPMs, the WDA(H) sits at the heart of the operation.
• Manufacturer’s “Specials” Licence (MS) is required where a product is manufactured or assembled in the UK to meet the special clinical needs of individual patients without a UK marketing authorisation.
• Home Office Controlled Drug (CD) licence is required for cultivation, production, possession, supply, import and export of cannabis-derived material, including for medicinal preparations. Home Office licensing is separate from MHRA authorisation and must be maintained independently.
• Import licences (Home Office) and, where applicable, GMP equivalence assurance for the manufacturing site of origin, are necessary for any CBPM brought into the UK.
• Pharmacy registration with the GPhC, where supply ends at a dispensing pharmacy. The General Pharmaceutical Council issued specific guidance in October 2025 for registered pharmacies handling CBPMs.

Quality assurance underpins all of this. UK regulators expect manufacturing sites — whether domestic or overseas — to operate to standards equivalent to those expected of any other licensed medicinal product manufacturer.

Qualified Person responsibility

Every batch of a UK-supplied CBPM passes through the hands of a Qualified Person. The QP’s certification is the formal regulatory act that releases a batch to the market. Where the UK distributor is also the importer, the QP function may be carried out by an independent contracted QP, particularly for smaller specials operations.

Three points are commonly misunderstood:

1. QP certification cannot be retroactively applied. A batch released without QP sign-off cannot be made lawful by a later signature.
2. QP responsibility is personal. The QP is named and identifiable; the function does not sit with the company in the abstract.
3. For imports, the QP must be satisfied that the overseas site of manufacture operates to standards consistent with UK expectations. This is where third-country GMP equivalence and audit documentation matter most.

An MHRA inspector will typically open a CBPM inspection by asking to see the QP’s release decisions for a recent batch — and then trace forward through the storage, dispatch and audit-trail records to the dispensing pharmacy. The integrity of that single chain is the inspection.

Storage standards for Schedule 2 material

CBPMs are Schedule 2 controlled drugs. Storage requirements derive from the Misuse of Drugs (Safe Custody) Regulations 1973 and from MHRA expectations for medicinal product storage. In practice this means:

• Storage in a safe meeting BS 7558 or equivalent, with documented access control.
• A current CD register recording all movements, with running balances reconcilable at any moment.
• Reconciliation by two competent persons where standard operating procedures require it.
• Witnessed destruction of expired or returned stock, recorded with the appropriate sign-off (often by the Controlled Drug Accountable Officer or designated witness).
• Environmental monitoring — temperature and, where relevant, humidity — appropriate to the product specification.

Some CBPM formulations require cold-chain handling. Oil-based preparations may be specified for 2-8°C transport and storage; flower preparations are typically room-temperature stable but humidity-sensitive. A clinic accepting deliveries should verify that the cold-chain log for the shipment is intact before signing off receipt; a broken log is a quality event, not a paperwork irritation.

Batch traceability — from cultivation to patient

Each batch should be traceable backwards from the dispensed unit to the cultivation lot. The chain typically looks like this:

1. Cultivation batch (cultivar, harvest date, lot reference) at the licensed grower.
2. Active pharmaceutical ingredient or finished-product manufacture, with QC certification.
3. Quality assurance under a pharmaceutical quality system aligned with recognised standards (referenced once here, given operational sensitivity around terminology).
4. QP release and certification.
5. Wholesale handling under the WDA(H), with goods-in and goods-out records.
6. Pharmacy receipt, register entry, and dispensing against the patient-specific prescription.

Each step should produce a record that is independently dated and signed. A CBPM supply chain that cannot reconstruct this trail backwards from a single dispensed bottle is not audit-ready.

What an MHRA inspection actually examines

MHRA inspections of WDA(H) holders handling CBPMs follow the same general pattern as inspections of any other Schedule 2 wholesale operation, with additional focus on the cannabis-specific elements. Recurring inspection themes:

• Documented onboarding of new suppliers, including verification of their manufacturing authorisation status and CD licences.
• Bona fide checks on customers — the wholesaler must satisfy itself that the purchasing pharmacy or clinic has the legal right to receive a Schedule 2 product.
• Temperature mapping of storage areas, with documented qualification of monitoring equipment.
• Returns and recalls — a written, tested recall procedure, with named responsible persons.
• Data integrity in electronic records, including audit trails on stock systems and CD register software.

A clinic procuring from a wholesaler should be willing to ask for the WDA(H) reference, the date of the most recent MHRA inspection and the outcome category. A wholesaler that hesitates to share these is not a wholesaler a regulated clinic should be using.

Independent QPs and small operations

Many UK CBPM specials operations are relatively small, with batch volumes that do not justify a full-time in-house QP. The independent contracted QP model is well-established, with the QP retaining personal regulatory responsibility while contracting their service to one or more licence holders. Clinics receiving product should understand which QP has certified each batch, since the QP’s audit history is part of the assurance picture.

Supply continuity — the structural risk

The UK CBPM market depends heavily on a small number of international supply routes. A short list of overseas manufacturers — primarily based in the Netherlands, Germany, Portugal, Australia, Canada and a small number of EU member states — supplies the great majority of clinic demand. Single-source dependency is the structural risk every procurement lead should map.

Specific recent disruptions illustrate the point. Changes in Dutch policy around the Office of Medicinal Cannabis and its single-cultivator model have repeatedly raised concerns about export continuity. German regulatory revisions, including measures consulted on in late 2025 to tighten telemedicine prescribing and consultation requirements, change demand patterns and influence available export volumes. UK clinics relying on a single supplier or a single country of origin are exposed to events outside their control.

Practical mitigation steps:

1. Maintain qualified secondary suppliers for each formulation family in routine clinical use.
2. Hold a documented switching protocol so that prescribers can move a patient from one batch family to a clinically equivalent alternative without unplanned delay.
3. Forecast demand in three-month windows and share forward estimates with distributors, who can in turn give earlier visibility to manufacturers.
4. Treat any single-source dependency longer than six months as a risk-register item, not an operational convenience.

Where this leaves clinics and distributors

The UK CBPM supply chain is mature enough that a clinic can build a reliable service, but young enough that the operational discipline required is closer to a hospital pharmacy than to a typical private-clinic dispensing operation. The decisive factor is rarely which product is on the shelf — it is whether the paperwork, the storage, the QP chain, the audit trail and the redundancy planning all stand up to inspection on an unannounced Tuesday.

About MUZO Health

MUZO Health was created to raise the standard of cannabis-based medicines in the UK, with a focus on quality, consistency and clinical integrity. Our mission is to support clinicians, empower patients and help move cannabis medicine forward responsibly, transparently and without compromise. Learn more about MUZO Health.