Cannabis Compliance: The Complete Operator's Guide

Cannabis compliance in the United States operates entirely at the state level — there is no federal regulator because cannabis remains a Schedule I controlled substance under federal law (21 USC 812). Each state operates its own Cannabis Regulatory Authority with its own rule set covering licensing, METRC track-and-trace reporting, lab testing, transport manifests, employee badging, security, and disposal. Multi-state operators must layer separate rule packs per state. This guide covers the operational compliance framework for state-legal cannabis businesses, with state-by-state references for the largest US markets.

State-by-State Cannabis Regulators

• California — California Department of Cannabis Control (DCC), METRC track-and-trace, 7 years (CCR Title 4 Section 15049) retention.
• Colorado — Colorado Marijuana Enforcement Division (MED), METRC track-and-trace, 3 years (1 CCR 212-3) retention.
• Michigan — Michigan Cannabis Regulatory Agency (CRA), METRC track-and-trace, 5 years minimum (R 420.501) retention.
• Massachusetts — Massachusetts Cannabis Control Commission (CCC), METRC track-and-trace, 3+ years (CMR 935 500.105) retention.
• Nevada — Nevada Cannabis Compliance Board (CCB), METRC track-and-trace, 5 years retention.
• New Jersey — New Jersey Cannabis Regulatory Commission (CRC), METRC track-and-trace, 5+ years retention.

Cannabis Compliance Topics

• METRC Cannabis Tracking: Reporting Requirements, Deadlines, and Common Violations
• Cannabis Lab Testing & COA Requirements: State-by-State Panels and Action Limits
• Cannabis Transport Manifest Rules: Required Information, Common Violations, and Multi-State Considerations
• Cannabis Employee Badging: State Requirements, Background Checks, and Renewal Schedules
• Cannabis Security Camera Retention: 90-Day Storage Rules, Coverage Requirements, and Common Violations
• Cannabis Recall Procedures: Recall Plan Requirements, Classifications, and Notification Rules