New York Cannabis Compliance Guide for Dispensaries — 2025
New York's cannabis regulatory framework is one of the most comprehensive in the country, built around the Marihuana Regulation and Taxation Act (MRTA) signed by Governor Cuomo in March 2021. For licensed dispensaries, understanding and maintaining compliance is not optional — the Office of Cannabis Management (OCM) has enforcement authority and has been actively applying it.
This guide covers the major compliance requirements for adult-use retail dispensaries operating in New York as of 2025.
Note: Cannabis regulations change frequently. This guide reflects requirements as of early 2025. Always verify current requirements directly with the OCM at cannabis.ny.gov.
The MRTA Framework
The Marihuana Regulation and Taxation Act established the OCM as New York's primary cannabis regulatory body and created the structure for legal adult-use, medical, and hemp markets. Key elements:
Adults 21+ may purchase cannabis from licensed retailers
The OCM issues licenses for cultivation, processing, distribution, and retail
Social equity is a statutory priority — the CAURD program was created under MRTA authority
Local municipalities retain some authority over whether dispensaries can operate in their jurisdiction
Advertising and Marketing Rules
New York's cannabis advertising rules are among the most restrictive in the country. The OCM has issued detailed advertising guidance that all dispensaries must follow.
Prohibited in advertising:
Any imagery or content that could appeal to minors (no cartoon characters, no imagery targeting under-21 audience)
Health or medical claims of any kind ("cures anxiety," "treats insomnia" — all prohibited)
Price advertising in certain formats (discount claims in most outdoor and broadcast formats are restricted)
False or misleading statements about products or competitors
Any suggestion that cannabis is safe for all populations
Platform restrictions:
Google and Meta prohibit cannabis advertising entirely — this is a platform policy, not just a state rule
Programmatic cannabis-specific ad networks are permitted but must target only 21+ verified audiences
Social media organic content is permitted but must not be targeted at under-21 users and must not include health claims
What this means for dispensaries: Nearly every form of traditional advertising is either prohibited or heavily restricted. Cannabis marketing has largely moved to owned channels (email, SMS, loyalty programs), in-store, and cannabis-specific platforms. This is precisely why AI-powered customer retention — which operates on a first-party customer relationship rather than advertising — is so valuable in this market.
See where your retention funnel is leaking
Run the AI Retention Audit to score customer capture, welcome-flow readiness, conversion friction, and repeat-revenue blockers.
New York requires cannabis products to comply with detailed packaging standards:
Child-resistant: All cannabis products must be in child-resistant packaging that meets federal consumer safety standards
Opaque: Packaging must conceal the product from view — clear packaging showing the product is not permitted
Plain packaging: Minimal design requirements; packaging should not be attractive to minors and must not include any imagery of people or animals
Required labeling: Product name, producer name, batch number, cannabinoid content (THC, CBD in mg), serving size, total servings, net weight, required warnings, QR code linking to COA
Universal symbol: New York's required cannabis warning symbol must appear on all packaging
Possession Limits
For consumers:
Up to 3 ounces (85 grams) of cannabis flower in public
Up to 24 grams of concentrated cannabis (extracts, oils)
Home possession: up to 5 pounds (personal cultivation is legal for adults — up to 6 plants)
For dispensaries: Licensed retailers must comply with inventory limits set under their license type. Purchasing above authorized quantities is a compliance violation.
Delivery Regulations
Cannabis delivery in New York is permitted but subject to specific requirements:
Only licensed delivery operators may conduct cannabis deliveries
Delivery personnel must be at least 21 years old
Age verification at delivery is required (government ID check on receipt)
Delivery vehicles may not display cannabis branding on exteriors
Delivery routes and records must be maintained for regulatory review
Cash transactions for delivery are subject to specific recordkeeping requirements
Laboratory Testing Requirements
All cannabis products sold in New York must be tested by an OCM-licensed, independent testing laboratory before sale. Required tests include:
Cannabinoid potency panel
Pesticide residue screen
Heavy metals screen
Microbial contaminants (E. coli, Salmonella, yeast, mold, Aspergillus)
Residual solvents (for concentrates and extracts)
Foreign matter visual inspection
Batch records and COAs must be retained and available for OCM inspection.
Employee Requirements: Handler Permits
All employees who directly handle cannabis — including dispensary staff, budtenders, and backroom inventory employees — must obtain a Cannabis Handler Permit from the OCM. Requirements include:
State-approved training program completion
Background check
Application through the OCM licensing portal
Dispensaries that allow unlicensed employees to handle cannabis products risk license suspension.
Social Equity Provisions
The MRTA includes extensive social equity provisions that affect dispensary operations:
Priority licensing for justice-impacted individuals and minority-owned businesses (CAURD program)
40% of adult-use tax revenue directed to community reinvestment
OCM social equity staff and programs
Mentorship requirements for some license categories
For dispensaries serving communities disproportionately impacted by cannabis prohibition, these provisions represent both compliance obligations and potential partnership opportunities.
Common Compliance Violations
OCM enforcement actions have focused on several common violations:
Unlicensed sales: Operating without a valid license or allowing license to lapse
Youth-targeted marketing: Advertising with imagery or channels that reach under-21 audiences
Medical claims: Staff making health or medical claims about products
Testing failures: Selling products that failed required testing or without COAs
Record-keeping failures: Inability to produce required documentation during inspection
Employee violations: Staff without required Handler Permits handling products
How BakedBot's Deebo Handles Compliance
BakedBot's compliance agent, Deebo, monitors all customer communications — SMS campaigns, email sequences, automated messages — against New York and other state compliance requirements before they send. Every message is reviewed for:
Health claims (zero tolerance)
Prohibited pricing language
Youth-appeal risk
Appropriate disclosure language
For dispensaries operating in multiple states, Deebo applies state-specific rule sets to ensure every message meets the requirements for its delivery jurisdiction.
Compliance in cannabis is not a one-time setup — it's an ongoing operational requirement. The best operators treat it as infrastructure, not as overhead.
