Blog

In the sprawling landscape of the California cannabis industry, the path to legality and regulatory compliance is often shrouded in complexity. This guide aims to illuminate the intricate web of regulatory bodies, licensing types, security requirements, and other critical considerations that define the California cannabis business environment.

Navigating the Regulatory Maze: The Trio of California Cannabis Supervisory Bodies

The state of California entrusts the control and supervision of its burgeoning cannabis industry to three primary regulatory agencies: The Bureau of Cannabis Control (BCC), the Manufactured Cannabis Safety Branch (MCSB), and CalCannabis Cultivation Licensing (CalCannabis). Each agency is charged with distinct responsibilities and areas of oversight within the broad spectrum of cannabis operations.

The Bureau of Cannabis Control (BCC)

The BCC, or Bureau of Cannabis Control, forms the backbone of California’s cannabis regulatory infrastructure. This agency is the primary licensing authority for cannabis retailers, distributors, microbusinesses, and testing labs, and it also manages regulation for various other cannabis-related ventures, such as cannabis consumption events.

Manufactured Cannabis Safety Branch (MCSB)

The Manufactured Cannabis Safety Branch (MCSB) is an integral division of the California Department of Public Health. The MCSB is entrusted with the regulation of the manufacturing and sale of cannabis-infused consumer goods and concentrates. Its purview extends to a wide variety of retail cannabis products, including vapes, pre-rolls, edibles, tinctures, and more.

CalCannabis Cultivation Licensing (CalCannabis)

CalCannabis Cultivation Licensing or CalCannabis is a division of the California Department of Agriculture. This agency manages the commercial cultivation of cannabis in California and also oversees the state’s Cannabis Track and Trace (CCTT) system, a comprehensive tracking system for legally cultivated cannabis from seed to sale.

California Cannabis Licenses: Types and Requirements

Within the scope of California cannabis operations, businesses can opt for one or both of two primary types of licenses:

• Adult Use (A-License): This license is for businesses that cater to recreational cannabis users aged 21 and above.
• Medicinal (M-License): This license is intended for businesses that provide medicinal cannabis products to adult users who possess a valid California medical cannabis card.

Business licenses for cannabis operations in California are further classified by business type. These include:

• Cultivator
• Manufacturer
• Testing Laboratory
• Retailer
• Distributor
• Microbusiness
• Event Organizer and Miscellaneous

While most licenses are available as either an A-license or an M-license, cannabis businesses can hold multiple types of licenses. Separate licenses may be required for every location where a cannabis business operates.

The Licensing Journey for California Cannabis Businesses

The journey to securing a California cannabis license varies based on the type of cannabis license and business type. Regardless of the agency (or agencies) a cannabis business must apply through, the business is required to submit:

• A comprehensive business plan
• Financial statements (proof of current financial holdings, documentation of investors, creditors, and loans, etc.)
• An inventory control plan
• A security plan
• Quality control and record-keeping plans
• Business premises information (floor plans, leasing, or purchase agreements)
• Proof of a $5,000 cannabis surety bond
• Criminal background checks and fingerprinting for all owners and employees

The Complexity of California Cannabis Security Regulations

The California cannabis security landscape is fraught with conflicting standards from the state’s three regulatory bodies, making it challenging for cannabis operators to comply with licensing security requirements. The situation is further complicated by the delayed plans to consolidate these regulatory bodies into the Department of Cannabis Control.

Understanding the Regulatory Bodies

Each of the three regulatory bodies has a specific area of oversight:

• The California Department of Food and Agriculture (CDFA) oversees cultivators and does not require operators to submit a security plan for a state license.
• The California Department of Health (CDPH) Manufactured Cannabis Safety Branch sets security requirements for cannabis manufacturers.
• The Bureau of Cannabis Control (BCC) regulates commercial cannabis licenses for medical and adult-use cannabis, licensing retailers, distributors, testing labs, micro-businesses, and temporary cannabis events.

Knowing the Rules

As cannabis companies strive to comply with regulations, they often encounter conflicting interpretations from different regulatory bodies. Here’s a brief summary of what each body requires:

CDPH: Requires cannabis manufacturers to develop and implement a written security plan addressing, at a minimum:

• Preventing access by unauthorized persons
• Protecting physical safety of employees
• Preventing theft or loss of cannabis products
• Securing and backing up electronic records
• Installing and operating a video surveillance system

BCC: To obtain a BCC license, applicants must submit a detailed facility diagram and a description of on-site activities.

CDFA: CalCannabis Cultivation Licensing, a division of the CDFA, licenses cultivators of medicinal and recreational cannabis and manages a track-and-trace system that records the movement of cannabis through the distribution chain.

Local Regulations and Security

State regulatory agencies establish a basic security framework, with additional regulations drafted by local jurisdictions. The security requirements for cannabis operations vary significantly from county to county and municipality to municipality, further complicating compliance.

Security Standard Operating Procedures (SOPs)

Licensing a cultivating, manufacturing, or distributing operation requires a security Standard Operating Procedure (SOP) that covers a range of considerations, including:

• Alarms, access control, surveillance cameras, lighting, and perimeter security
• Record-keeping security processes
• Security personnel or armed guards
• Ingress and egress security
• Employee background screening processes and employee identification
• Securing limited access areas

Security Technology Considerations

A robust cannabis security program includes cameras, access control systems, and burglar alarms. Each technology plays a critical role in ensuring compliance and security.

Cameras: The State of California requires video surveillance in specific areas and at certain operational stages. Also, security cameras must meet specific technical requirements, including minimum resolution, mounting, recording activity, and storage duration.

Access Control: Even though California regulations do not provide detailed provisions on access control systems, these systems play a crucial role in a cannabis security plan.

Burglar alarms: California law requires securing and protecting cannabis facilities with intrusion alarms at entrances, exits, and around the perimeter.

Understanding and navigating the complex landscape of California cannabis law is a daunting task. However, with regulatory expertise, businesses can navigate the conflicting standards from regulatory bodies and chart a course to compliance.