Case Results:
Operating a cannabis dispensary in California requires more than maintaining a valid license. Dispensaries must comply with state and local regulations, including inventory tracking, security standards, and customer verification requirements. Failure to comply can result in citations, fines, or license issues.
Regular compliance reviews can help identify problems early. While the California Department of Cannabis Control (DCC) provides guidance, businesses must still ensure they meet all requirements specific to their license and operations.
If you operate a California cannabis dispensary, the following checklist can help you review key compliance areas. McElfresh Law helps cannabis businesses understand California’s regulatory requirements, respond to enforcement issues, and protect their licenses.
Cannabis dispensary compliance involves several areas of day-to-day operations. Requirements can apply to your premises, employees, inventory, customers, security systems, records, and sales practices.
Use this checklist as a starting point for reviewing your operations.
Before conducting commercial cannabis activity, confirm that your dispensary has a valid license for the premises and the activities you conduct there. California regulations require commercial cannabis activity to be conducted only under the appropriate license and at the licensed premises.
Review your license regularly to confirm:
A state cannabis license does not eliminate local requirements. Cities and counties may impose additional restrictions on cannabis businesses, so dispensaries must understand the rules that apply in their particular jurisdiction.
California dispensaries must verify a customer’s age and identity before allowing the customer to purchase cannabis. Access requirements can vary depending on whether the retailer is licensed for adult-use, medicinal use, or both.
Dispensaries should have written procedures for:
Employees should consistently follow the same procedures. A failure to properly verify customers can lead to enforcement action against the business. Recent DCC compliance records include retailer citations involving failures to confirm customer age.
Retailers must also ensure that customers do not exceed applicable daily purchase limits.
For adult-use customers, current DCC regulations establish limits including 28.5 grams of non-concentrated cannabis, 8 grams of cannabis concentrate, and six immature cannabis plants per day.
Different limits apply to medicinal cannabis patients and caregivers. Your point-of-sale system and employee procedures should enable you to identify purchases that could exceed the applicable limits.
Inventory management is one of the most important areas of cannabis compliance. Dispensaries must accurately record required cannabis activity in the California Cannabis Track and Trace system and maintain records that correspond with the physical inventory on the premises.
Your compliance review should include:
The DCC has specifically identified track-and-trace accuracy and inventory reconciliation as enforcement issues. Recent retailer compliance actions include citations for inaccurate track-and-trace information, inventory reconciliation failures, and failures to record required activity within the applicable timeframes.
California’s track-and-trace rules are also subject to ongoing regulatory changes. In 2026, the DCC proposed additional requirements for recording certain retail sales and tax information in the track-and-trace system.
Before selling cannabis products, confirm they comply with California’s packaging and labeling requirements.
Depending on the product, packaging requirements can include being:
The DCC also provides specific guidance concerning cannabis product packaging and labeling. Dispensaries should review products upon arrival and establish procedures to identify those with packaging or labeling issues. Selling a noncompliant product can create regulatory and business risks, even when the dispensary did not manufacture it.
Security is another important part of cannabis dispensary compliance. Your business should regularly review its security systems and procedures to ensure they remain operational and consistent with applicable requirements.
Depending on the operation, compliance reviews may include:
Video surveillance requirements are particularly important. DCC compliance records show that retailers have received citations related to surveillance requirements, including failures to meet required recording and retention periods.
A security system that was compliant when installed may no longer be compliant if cameras stop working, the premises change, or required recordings are not properly maintained.
Your employees are responsible for carrying out many of your dispensary’s compliance procedures. Written policies are important, but they are only effective if employees understand and follow them.
Training should address areas such as:
Keep records of employee training and update your policies when regulations or business operations change.
California cannabis businesses should maintain appropriate records and written procedures for their operations. The DCC identifies standard operating procedures as part of the documentation that may be requested from retailer applicants.
Review your procedures regularly to make sure they accurately reflect what your dispensary does. A compliance problem can arise when written policies say one thing, but employees follow a different process in practice.
California retailers have specific obligations concerning consumer information. For example, SB 540 requires licensed retailers, including storefront and delivery retailers, to display and offer a DCC-developed consumer brochure to new consumers. The requirement took effect on March 1, 2025.
Dispensaries should confirm that required consumer information is available at the appropriate point of sale and, when applicable, during online purchases or delivery transactions.
State compliance is only one part of operating a California cannabis dispensary. Cities and counties may establish their own requirements concerning issues such as:
Local requirements can change, particularly as jurisdictions revise cannabis ordinances or expand or restrict where cannabis businesses may operate. Before changing your premises or operations, confirm that the proposed change complies with both state and local requirements.
Cannabis compliance violations can have serious consequences. Depending on the nature and severity of the violation, a dispensary may face citations, monetary penalties, license denial or renewal problems, or other disciplinary action.
The DCC maintains public records of cannabis license denials, citations, disciplinary actions, and other enforcement matters. Recent records demonstrate that retailers have faced enforcement over issues including surveillance, track-and-trace reporting, inventory reconciliation, customer access and age verification, security personnel, and recordkeeping.
Not every compliance problem will result in the same penalty. The potential consequences depend on the specific regulation at issue, the circumstances surrounding the violation, and the business’s response. That is why dispensaries should address potential violations promptly rather than assuming a problem will resolve on its own.
A dispensary should not wait for a DCC inspection to identify potential compliance problems. Regular internal reviews can help identify issues involving:
A compliance review should also be conducted when your business changes its premises, ownership, employees, products, technology, or operating procedures.
California’s cannabis regulatory system continues to evolve. The DCC currently lists several rulemaking actions that could affect cannabis licensees, including proposed changes involving track-and-trace requirements. Staying current is part of maintaining compliance.
Dispensaries must comply with requirements involving licensing, local authorization, customer age and identity verification, purchase limits, inventory and track-and-trace systems, security, recordkeeping, product packaging and labeling, employee procedures, and other state and local rules. The specific requirements depend on the business’s license and operations.
Yes. A state cannabis license does not replace local requirements. Cities and counties may impose their own cannabis business regulations, and dispensaries must comply with applicable local rules in addition to state requirements.
An inventory discrepancy can create a compliance issue. Dispensaries should promptly investigate discrepancies, determine why the records do not match the physical inventory, and make any required corrections in accordance with applicable regulations. Track-and-trace accuracy and inventory reconciliation have been identified in recent DCC enforcement actions.
Yes. Before selling cannabis products, a licensed retailer must verify the customer’s age and identity with valid identification. The applicable requirements can vary based on whether the retailer is authorized for adult-use, medicinal, or both types of sales.
Potentially. California imposes packaging requirements on cannabis goods sold through licensed retailers. Dispensaries should have procedures to review incoming products and identify potential packaging or labeling issues before products are offered for sale.
Do not ignore the notice or assume the issue is minor. Review the alleged violation, identify the applicable regulation, preserve relevant records, and determine what response or corrective action may be required. An attorney experienced in California cannabis law can help you evaluate the violation and protect your license and business interests.
Cannabis compliance is an ongoing responsibility. Maintaining a valid license is only the beginning. Dispensaries must also monitor inventory, track-and-trace records, customer verification, security systems, employee procedures, product requirements, local regulations, and other operational obligations.
McElfresh Law represents cannabis businesses throughout California and provides guidance on licensing, regulatory compliance, zoning, enforcement matters, and other cannabis business issues. If you have questions about your dispensary’s compliance obligations or have received a notice from a regulatory agency, Attorney Jessica McElfresh can help you evaluate the situation and protect your business.
Contact McElfresh Law today at (858) 756-7107 or use our online contact form to schedule a consultation about your California cannabis business.
"*" indicates required fields
