New York Cannabis Compliance Guide for Dispensaries — 2025

New York's cannabis regulatory framework is one of the most comprehensive in the country, built around the Marihuana Regulation and Taxation Act (MRTA) signed by Governor Cuomo in March 2021. For licensed dispensaries, understanding and maintaining compliance is not optional — the Office of Cannabis Management (OCM) has enforcement authority and has been actively applying it.

This guide covers the major compliance requirements for adult-use retail dispensaries operating in New York as of 2025.

Note: Cannabis regulations change frequently. This guide reflects requirements as of early 2025. Always verify current requirements directly with the OCM at cannabis.ny.gov.

The MRTA Framework

The Marihuana Regulation and Taxation Act established the OCM as New York's primary cannabis regulatory body and created the structure for legal adult-use, medical, and hemp markets. Key elements:

• Adults 21+ may purchase cannabis from licensed retailers
• The OCM issues licenses for cultivation, processing, distribution, and retail
• Social equity is a statutory priority — the CAURD program was created under MRTA authority
• Local municipalities retain some authority over whether dispensaries can operate in their jurisdiction

Advertising and Marketing Rules

New York's cannabis advertising rules are among the most restrictive in the country. The OCM has issued detailed advertising guidance that all dispensaries must follow.

Prohibited in advertising:

• Any imagery or content that could appeal to minors (no cartoon characters, no imagery targeting under-21 audience)
• Health or medical claims of any kind ("cures anxiety," "treats insomnia" — all prohibited)
• Price advertising in certain formats (discount claims in most outdoor and broadcast formats are restricted)
• False or misleading statements about products or competitors
• Any suggestion that cannabis is safe for all populations

Platform restrictions:

• Google and Meta prohibit cannabis advertising entirely — this is a platform policy, not just a state rule
• Programmatic cannabis-specific ad networks are permitted but must target only 21+ verified audiences
• Social media organic content is permitted but must not be targeted at under-21 users and must not include health claims

What this means for dispensaries: Nearly every form of traditional advertising is either prohibited or heavily restricted. Cannabis marketing has largely moved to owned channels (email, SMS, loyalty programs), in-store, and cannabis-specific platforms. This is precisely why AI-powered customer retention — which operates on a first-party customer relationship rather than advertising — is so valuable in this market.

Packaging Requirements

New York requires cannabis products to comply with detailed packaging standards:

• Child-resistant: All cannabis products must be in child-resistant packaging that meets federal consumer safety standards
• Opaque: Packaging must conceal the product from view — clear packaging showing the product is not permitted
• Plain packaging: Minimal design requirements; packaging should not be attractive to minors and must not include any imagery of people or animals
• Required labeling: Product name, producer name, batch number, cannabinoid content (THC, CBD in mg), serving size, total servings, net weight, required warnings, QR code linking to COA
• Universal symbol: New York's required cannabis warning symbol must appear on all packaging

Possession Limits

For consumers:

• Up to 3 ounces (85 grams) of cannabis flower in public
• Up to 24 grams of concentrated cannabis (extracts, oils)
• Home possession: up to 5 pounds (personal cultivation is legal for adults — up to 6 plants)

For dispensaries: Licensed retailers must comply with inventory limits set under their license type. Purchasing above authorized quantities is a compliance violation.

Delivery Regulations

Cannabis delivery in New York is permitted but subject to specific requirements:

• Only licensed delivery operators may conduct cannabis deliveries
• Delivery personnel must be at least 21 years old
• Age verification at delivery is required (government ID check on receipt)
• Delivery vehicles may not display cannabis branding on exteriors
• Delivery routes and records must be maintained for regulatory review
• Cash transactions for delivery are subject to specific recordkeeping requirements

Laboratory Testing Requirements

All cannabis products sold in New York must be tested by an OCM-licensed, independent testing laboratory before sale. Required tests include:

• Cannabinoid potency panel
• Pesticide residue screen
• Heavy metals screen
• Microbial contaminants (E. coli, Salmonella, yeast, mold, Aspergillus)
• Residual solvents (for concentrates and extracts)
• Foreign matter visual inspection

Batch records and COAs must be retained and available for OCM inspection.

Employee Requirements: Handler Permits

All employees who directly handle cannabis — including dispensary staff, budtenders, and backroom inventory employees — must obtain a Cannabis Handler Permit from the OCM. Requirements include:

• State-approved training program completion
• Background check
• Application through the OCM licensing portal

Dispensaries that allow unlicensed employees to handle cannabis products risk license suspension.

Social Equity Provisions

The MRTA includes extensive social equity provisions that affect dispensary operations:

• Priority licensing for justice-impacted individuals and minority-owned businesses (CAURD program)
• 40% of adult-use tax revenue directed to community reinvestment
• OCM social equity staff and programs
• Mentorship requirements for some license categories

For dispensaries serving communities disproportionately impacted by cannabis prohibition, these provisions represent both compliance obligations and potential partnership opportunities.

Common Compliance Violations

OCM enforcement actions have focused on several common violations:

1. Unlicensed sales: Operating without a valid license or allowing license to lapse
2. Youth-targeted marketing: Advertising with imagery or channels that reach under-21 audiences
3. Medical claims: Staff making health or medical claims about products
4. Testing failures: Selling products that failed required testing or without COAs
5. Record-keeping failures: Inability to produce required documentation during inspection
6. Employee violations: Staff without required Handler Permits handling products

How BakedBot's Deebo Handles Compliance

BakedBot's compliance agent, Deebo, monitors all customer communications — SMS campaigns, email sequences, automated messages — against New York and other state compliance requirements before they send. Every message is reviewed for:

• Health claims (zero tolerance)
• Prohibited pricing language
• Youth-appeal risk
• Appropriate disclosure language

For dispensaries operating in multiple states, Deebo applies state-specific rule sets to ensure every message meets the requirements for its delivery jurisdiction.

Compliance in cannabis is not a one-time setup — it's an ongoing operational requirement. The best operators treat it as infrastructure, not as overhead.