You've got your license. Now comes the hard part.
Most California cannabis operations don't fail because of bad product or lack of customers. They fail because of avoidable compliance mistakes that drain capital, stall operations for months, or trigger enforcement actions that cost them their license.
After reviewing hundreds of enforcement cases and speaking with operators across the state, we've identified the compliance landmines that trip up new growers most often. Here are the ten you absolutely cannot afford to miss:
The California Environmental Quality Act (CEQA) requires environmental review before the Department of Cannabis Control (DCC) can issue your annual license. The DCC acts as a responsible agency and cannot approve your license until CEQA is complete.
Dozens of operators have been frozen for months—or lost their leases entirely—because they didn't complete their environmental review on time.
What to do: Work closely with your local permitting program as the lead agency, respond to information requests promptly, and hire an environmental consultant to prepare the necessary studies. Start this process before you submit your state application.
The State Water Resources Control Board's Cannabis Policy prohibits cultivators from diverting surface water during the dry-season forbearance period (April 1 – October 31). Water used during the dry season must be diverted to off-stream storage during the wet season.
This violation alone has delayed countless outdoor operations.
What to do: Obtain a Small Irrigation Use Registration (Cannabis SIUR) to divert up to 6.6 acre-feet of surface water, or secure an appropriative water permit or license. Proof of water rights must be submitted with your DCC license application.
California uses the California Cannabis Track-and-Trace system (CCTT/Metrc) to monitor all cannabis. Every plant and cannabis product must be tagged with a unique identifier (UID).
Missing tags, late entries, or sloppy data entry can trigger $15,000 fines per violation.
What to do: Record all activities—planting, harvest, transfers, testing, sales, disposal—into the CCTT within 24 hours. Each transfer requires a shipping manifest identifying origin, license numbers, item names, weights, counts, driver information and transport schedule. Treat METRC like payroll: daily, accurate, and never ignored.
You must obtain a local permit or land use approval before the DCC will process your state application. Many operators sign leases or start buildouts before realizing their county has zoning restrictions or cultivation caps.
What to do: Always verify county and municipal ordinances. Get a zoning opinion letter and confirm local rules before you invest a dime. Remember: the state can't issue your license without local sign-off.
California takes environmental impact seriously—and violations can mean fines, stop-work orders, or retrofits costing six figures.
Cultivators must comply with lighting standards (shielded during nighttime to reduce glare and light pollution), pesticide regulations (only use pesticides allowed for cannabis, store securely, prevent drift to waterways), and generator requirements (engines ≥50 horsepower require registration with the local air district and compliance with Airborne Toxic Control Measures).
All cultivators must enroll in the Cannabis Cultivation General Order or regional waste-discharge program and submit annual monitoring reports.
What to do: Build your compliance checklist into your project plan from day one. File stormwater plans, pesticide use reports, and register generators over 50hp.
Security requirements include limited-access areas, video surveillance with at least 90 days of footage, alarm systems, restricted access logs, and secure storage. The DCC often reviews security footage, alarm tests and visitor logs during inspections.
Missing footage, dead cameras, or unsecured doors can delay final approval—or worse, trigger enforcement.
What to do: Plan your camera layout before construction. Ensure cameras cover all cultivation areas, entrances, exits, and storage. Store footage for 90+ days and test your alarm system regularly.
Expanding canopy or changing building layouts without notifying the DCC is a serious violation. Many operators get flagged during inspections for "unauthorized modifications."
What to do: Always submit a modification request before making changes to your premises or canopy size. Keep your site plan current and on file.
Cultivators must follow all pesticide statutes enforced by the California Department of Pesticide Regulation. Only use pesticides allowed for cannabis, store chemicals securely, prevent leaks and spills, avoid drift to waterways, avoid spraying during pollination, and never apply pesticides when pollinators are present.
Cannabis waste must be rendered "unusable and unrecognizable" before disposal.
What to do: Applicants must provide a pest-management plan detailing integrated pest-management techniques, pesticide use and storage, and prevention of cross-contamination. Waste plans should outline composting, recycling, cannabis waste disposal (rendering cannabis unusable), and record-keeping. Train your staff on destruction procedures and keep detailed logs.
All cannabis goods must be sold in child-resistant packaging (CRP). Single-use CRP is acceptable for flower, pre-rolls, topicals, concentrates and vape cartridges. Multiple-use CRP is required for edibles, tinctures, capsules and suppositories.
Every retail package must display the state's universal symbol (triangle with cannabis leaf) and a government warning. Packaging cannot make false health claims or show pictures of the edible product.
Products and packaging cannot be shaped like or imitate candy, cartoons, animals, fruits or snacks; cannot use bright or flashy colors; and cannot depict minors or use words like "candy."
What to do: Have packaging approved by compliance experts before printing. Anything resembling candy or marketing to minors can get you suspended.
Under Business & Professions Code § 26030, each violation can carry fines up to $5,000 per violation for licensees; each day constitutes a separate violation. Repeated or uncorrected violations may result in suspension or revocation of the license.
Many operators lose their license simply by not responding fast enough.
What to do: Treat every regulatory notice as urgent—even if it seems minor. Respond immediately and document all corrective actions.
Most failed grows don't fail because they can't grow great flower—they fail because they underestimate California's compliance machine.
By planning for these ten risks before you start, you can save tens of thousands of dollars, protect your license, and stay focused on what really matters: harvesting a successful first crop.
Need help navigating California's regulatory maze? We've built a step-by-step compliance checklist used by dozens of successful operators.
