Cannabis Compliance

Cannabis Compliance Attorneys

Protect Your License. Reduce Regulatory Risk. Stay Inspection Ready.

Licensing is only the beginning. We help cannabis businesses navigate evolving regulations, prepare for inspections, respond to enforcement actions, structure ownership changes, review advertising, and remain compliant as regulations evolve.

Download Cannabis Compliance Checklist
Ongoing Business Function

Compliance Isn't a One-Time Event

Cannabis businesses operate in one of the most heavily regulated industries in the country. Compliance extends far beyond obtaining a license. It is a continuous business function that touches every part of the operation — from how ownership is structured to how a single social-media post is worded.

Successful operators build internal cadence and legal oversight around the areas regulators examine most closely:

Operating procedures
Ownership changes
Corporate governance
Marketing
Inventory controls
Employee training
Recordkeeping
Vendor relationships
Security
Regulatory updates

The most successful cannabis businesses treat compliance as an ongoing business process — not a reaction to inspections or enforcement.

Who We Represent

Industries We Represent

Adult-Use Retail Dispensaries
Microbusinesses
Cultivators
Processors
Distributors
Registered Organizations
Investors
Management Companies
Landlords
Cannabis Startups
Compliance Services

How We Support Cannabis Operators

Compliance is not a single deliverable. Our services span audit, governance, transactions, marketing, operations, defense, and executive counsel.

Regulatory Compliance Audits

Internal operational reviews before regulators arrive. We evaluate documentation, procedures, and risk against current regulations and jurisdictional expectations.

Corporate Governance

Governance structures built for a regulated business.

  • Operating agreements
  • Member changes
  • Board governance
  • Ownership compliance
Ownership Changes

Ownership, investment, and control changes require careful sequencing to remain compliant.

  • Transfer approvals
  • TPI applications
  • Investment review
  • Corporate restructuring
Advertising Compliance

Cannabis marketing is one of the most heavily regulated areas of the business.

  • Website review
  • Social media review
  • Promotional compliance
  • Packaging review
  • Marketing audits
Operational Compliance

The written backbone that regulators expect to see and staff need to follow.

  • Standard operating procedures
  • Policies
  • Employee manuals
  • Security procedures
  • Vendor agreements
  • Recordkeeping
Enforcement Defense

Rapid, structured response when a regulator opens a matter.

  • Regulatory investigations
  • Administrative responses
  • Settlement negotiations
  • Corrective action plans
  • License protection
General Counsel Services

Executive-level legal support without the cost of an in-house department.

  • Outside counsel
  • Executive legal guidance
  • Board support
  • Operational risk management
  • Expansion strategy
Risk Areas

Common Compliance Risks

The findings we see most often across dispensaries, cultivators, and processors — and the areas that most benefit from structured legal review.

Inventory discrepancies

Track-and-trace variances, reconciliation gaps, and untimely reporting are among the most common enforcement triggers.

Advertising violations

Restricted content, audience targeting, imagery, and promotional claims are heavily scrutinized.

Ownership changes

Unapproved transfers, silent investors, and undisclosed control relationships create compounding risk.

Corporate governance failures

Stale operating agreements, missing minutes, and unclear authority chains undermine license integrity.

Recordkeeping deficiencies

Missing or disorganized records are frequently the primary finding in inspections and audits.

Security issues

Surveillance gaps, access-control lapses, and incident reporting failures draw regulator attention.

Employee training

Undocumented training, inconsistent policies, and knowledge gaps are common inspection findings.

License renewals

Late filings, changed disclosures, and unresolved conditions can jeopardize renewal timelines.

Operational deviations

Day-to-day practice drifting from written SOPs is a leading source of citations.

Municipal compliance

Local zoning, community impact, and reporting obligations often run parallel to state requirements.

Lifecycle

The Compliance Lifecycle

  1. 1
    Business Formation

    Entity structure, cap table, governance, and jurisdiction strategy set the compliance foundation.

  2. 2
    Licensing

    Application, disclosures, and municipal approvals.

  3. 3
    Operations

    SOPs, training, recordkeeping, security, and reporting go live.

  4. 4
    Internal Audit

    Scheduled legal review of documentation, governance, and operational alignment.

  5. 5
    Inspection

    Regulator engagement — routine, targeted, or renewal-driven.

  6. 6
    Notice (if applicable)

    Notice of violation, inquiry, or investigation is reviewed and preserved.

  7. 7
    Corrective Action

    Response strategy, corrective action plan, and remediation.

  8. 8
    Continued Compliance

    Updated policies, staff training, and monitoring embedded into operations.

  9. 9
    Growth

    Ownership changes, new locations, and multi-state expansion — with compliance built in.

Flagship Program

The James Firm Cannabis Compliance Program

Many operators benefit from proactive legal oversight rather than waiting until a notice, inquiry, or enforcement action arrives. Our Cannabis Compliance Program is a recurring monthly engagement that puts a legal team inside your compliance function.

Scope is tailored to license type, size, and risk profile — from single-location dispensaries to multi-state operators and management companies.

Quarterly legal compliance audits
Monthly regulatory updates
Advertising and website reviews
Corporate governance reviews
Ownership change consultations
Policy and SOP reviews
Executive legal strategy sessions
Inspection preparation
Enforcement response planning
Priority attorney access
Ongoing legal Q&A
Program scope, cadence, and pricing are tailored during your strategy session.
Inspection Readiness

Preparing for Cannabis Regulatory Inspections

Inspection preparation is less about the day of the visit than about the months preceding it. Operators who consistently maintain organized records, trained staff, accurate inventory, functioning security systems, and current SOPs are dramatically better positioned when a regulator arrives — regardless of the reason for the visit.

Our role is to help operators build a durable readiness posture — through legal review of documentation, staff training frameworks, recordkeeping systems, and internal audit cadence — so that inspection readiness is a byproduct of daily operations rather than a special event.

This section is general and educational and does not describe or predict specific inspection procedures or outcomes.

Readiness Building Blocks
  • Organized and current corporate records
  • Documented and trained SOPs
  • Accurate inventory and reconciliation records
  • Functioning security and surveillance systems
  • Employee training documentation
  • Advertising and website review history
  • Municipal filing and reporting records
  • Internal audit and remediation logs
Enforcement & Investigations

When a Regulator Opens a Matter

If a business receives a notice of violation, inquiry, or enforcement action, early legal guidance can help evaluate options, organize a response, and develop corrective action plans that protect the license. How the first 72 hours are handled often shapes the entire matter.

Notice review

Immediate legal review of any regulator communication — including preservation of documents and evidence.

Response strategy

Deadlines, factual investigation, and framing of the operator's response to the regulator.

Administrative proceedings

Representation through informal conferences, hearings, and settlement discussions.

Corrective actions

Root-cause analysis, remediation plans, and documentation regulators expect to see.

Ongoing compliance improvements

Turning the response into durable process changes that reduce future exposure.

Premium Service

Cannabis Compliance Audit

A structured legal compliance review of the operator's records, governance, advertising, SOPs, security documentation, and regulatory filings — producing findings, risk assessment, and a prioritized action plan.

Audit Categories
  • Corporate Records
  • Governance
  • Website Compliance
  • Advertising
  • SOPs
  • Operating Procedures
  • Ownership
  • Internal Policies
  • Security Documentation
  • Regulatory Filings
Deliverables
  • Written findings
  • Risk assessment
  • Recommended action items
  • Prioritized implementation plan
Free Resource

Cannabis Compliance Checklist

A practical checklist operators can use as an internal baseline for inspection readiness, governance, advertising, documentation, and operations. Enter your email to receive it.

  • Inspection readiness checklist
  • Governance review
  • Advertising review
  • Documentation checklist
  • Operational compliance checklist
Get the Checklist

By submitting, you agree to receive occasional emails from The James Firm. This is not legal advice or the formation of an attorney-client relationship.

Cannabis Compliance Newsletter

Stay Ahead of Regulatory Changes

Subscribers receive regulatory updates, enforcement trends, compliance alerts, legislative developments, and practical legal guidance for operating a licensed cannabis business.

Regulatory updates
Enforcement trends
Compliance alerts
Legislative developments
Practical legal guidance
Cannabis Compliance FAQs

Frequently asked questions

Answers to the questions we hear most from dispensaries, cultivators, processors, investors, and management companies.

What does a cannabis compliance attorney do?

A cannabis compliance attorney provides ongoing legal oversight for licensed operators — reviewing operating procedures, corporate governance, advertising, ownership changes, recordkeeping, and inspection readiness — and represents the business if a regulator issues a notice, inquiry, or enforcement action.

Do I need a compliance attorney after I already have a license?

Licensing is only the beginning. Cannabis regulations continue to evolve, ownership and management often change, and regulators expect operators to maintain records, SOPs, and advertising in continuous compliance. Ongoing legal oversight helps identify issues before they become violations.

How is compliance different from licensing?

Licensing gets you approved to operate. Compliance is the ongoing legal function of staying approved — updating governance, monitoring regulatory changes, maintaining records, training staff, and responding to inquiries or investigations.

What is a cannabis compliance audit?

A legal compliance audit is a structured internal review of your corporate records, SOPs, governance, advertising, security documentation, and regulatory filings. It produces written findings, a risk assessment, and a prioritized action plan.

How often should we conduct a compliance audit?

Most operators benefit from a comprehensive audit at least once per year, with focused quarterly reviews of higher-risk areas such as advertising, inventory records, and ownership documentation. Businesses on a compliance retainer typically receive scheduled reviews throughout the year.

What triggers a regulatory inspection?

Inspections may be routine, complaint-driven, or triggered by data anomalies, application updates, ownership changes, or renewals. Regardless of the trigger, operators should maintain continuous inspection readiness rather than preparing reactively.

How should I prepare for a cannabis inspection?

Preparation focuses on organized records, accurate inventory tracking, current SOPs, staff training documentation, security compliance, and up-to-date corporate filings. General readiness is achieved through consistent internal review, not last-minute preparation.

What is a True Party of Interest (TPI) filing?

Many cannabis regulators require disclosure and approval of individuals or entities with financial, managerial, or beneficial interests in a licensed business. TPI rules can apply to investors, lenders, management companies, and certain contractors, and typically require pre-approval before a transaction closes.

Can I add or remove owners without regulator approval?

Most cannabis license jurisdictions require prior approval of ownership changes, including new members, transfers of interest, and certain capital events. Making changes without approval can result in violations, license conditions, or transactional risk.

What advertising rules apply to cannabis businesses?

Cannabis advertising is heavily restricted — including limits on audience targeting, health claims, imagery, geographic placement, packaging, and social media. Compliance counsel typically reviews websites, campaigns, promotions, and packaging before launch.

What happens if we receive a notice of violation?

Notices should be reviewed immediately by counsel. Early legal guidance helps evaluate the underlying issue, preserve documentation, respond within regulatory deadlines, and develop corrective action plans that reduce ongoing risk.

What is a corrective action plan?

A corrective action plan documents the operator's response to identified deficiencies — including root cause, remediation steps, personnel responsible, and ongoing monitoring. Well-prepared plans can reduce escalation and demonstrate good faith to regulators.

What is outside general counsel for a cannabis business?

Outside general counsel provides ongoing executive-level legal guidance without the cost of a full in-house department — covering compliance, corporate governance, contracts, employment issues, regulatory strategy, and expansion planning.

What does a monthly compliance retainer include?

Retainers typically include scheduled legal audits, regulatory updates, advertising and website reviews, governance reviews, ownership change consultations, SOP reviews, executive legal strategy sessions, inspection preparation, and priority attorney access. Scope is tailored to the size and complexity of the operator.

Do you represent investors and management companies?

Yes. We represent investors evaluating cannabis opportunities, management companies operating on behalf of license holders, and landlords leasing to cannabis tenants — including TPI analysis, structuring, and ongoing compliance considerations.

Do you work with multi-state operators?

We support operators expanding across multiple jurisdictions with structuring, compliance planning, and coordination with local counsel where required — including New York, New Jersey, and Virginia.

How is recordkeeping regulated?

Cannabis regulators typically require detailed recordkeeping across inventory, sales, transportation, security, personnel, financial reporting, and corporate governance. Retention periods vary by jurisdiction and license type.

What security requirements apply to cannabis operators?

Requirements generally address surveillance, access control, alarm systems, transport, storage, and incident reporting. Documentation of policies and testing is often as important as the physical measures themselves.

How do municipalities affect ongoing compliance?

Local governments frequently impose zoning, operational, community impact, and reporting obligations in addition to state requirements. Municipal compliance is often a separate — and sometimes higher-risk — track from state licensing.

How do I get started with a compliance program?

Most engagements begin with a compliance strategy session to understand the operation, followed by a scoped legal audit and a proposed retainer aligned to the business's size, license type, and risk profile.

Ready to move your liquor license forward?

Before you sign a lease, invest in buildout, or appear before a Community Board, speak with an attorney who understands New York's liquor licensing process.

NYC (212) 845-9909 · Nassau/Suffolk (516) 858-5887
Call NYC(212) 845-9909