The Annual Cannabis Compliance Self-Audit Every California Operator Should Run

Baghoomian Law

The cheapest enforcement defense in California cannabis is the one you run on yourself. A DCC investigator will eventually look at your records, your premises, and your track-and-trace data — and the time to find the problems is before they do, not during an inspection. An annual compliance self-audit turns the vague fear of “getting caught” into a concrete checklist you can actually work through.

Why a Self-Audit Matters

Most enforcement cases do not start with dramatic misconduct. They start with small, boring failures — an expired local approval, a surveillance drive that does not hold the required footage, an owner who was never disclosed, a stack of records nobody can find. Each is easy to fix in advance and expensive to explain after the fact. A yearly self-audit is how disciplined operators keep small slips from becoming an accusation.

1. Licensing and Renewal

Confirm your state license and local approval are both active, and calendar your renewal window — no earlier than 60 days before expiration, with a hard stop at expiration and only a 30-day late window at a 50 percent penalty (4 CCR section 15020). A lapsed license means you cannot operate.

2. Ownership and Financial Interest Holders

Verify that every current owner and financial interest holder on file with the DCC matches reality, and that any change in the past year was reported within 14 calendar days (4 CCR section 15023). Undisclosed owners are a top enforcement trigger.

3. Records

Confirm you are keeping required financial, personnel, and operational records for at least seven years and that you can produce them to the DCC on request (4 CCR section 15037). If you cannot retrieve a record quickly, that is a finding waiting to happen.

4. Track-and-Trace and Inventory

Reconcile your physical inventory against Metrc and confirm activity is recorded within 24 hours (4 CCR section 15049). Investigate and document every discrepancy. Unexplained inventory is the fastest route to a diversion allegation.

5. Security and Surveillance

Check that your video surveillance meets DCC requirements and retains the required footage (generally 90 days), that cameras cover the required areas, and that your alarm and access controls work. A surveillance gap is one of the most common items cited in enforcement.

6. Premises, Labeling, and SOPs

Confirm your operations match your licensed premises diagram, that products are properly packaged and labeled, and that your standard operating procedures are current and actually followed. Regulators compare what you do to what you filed.

What to Do With What You Find

Document the audit, fix what you can immediately, and prioritize the rest by risk. Where a problem is significant or carries legal exposure — an undisclosed owner, a real inventory gap, an expired approval — bring in counsel before you self-report, so you fix it in the way that best protects the license.

Frequently Asked Questions

How often should a California cannabis business run a compliance audit?

At least annually, and after any major change such as new owners, a new location, or new SOPs. Many operators also run quarterly track-and-trace reconciliations.

What does the DCC look at in an audit?

Licensing and local approval, ownership and financial interest holders, records kept for seven years, track-and-trace and inventory, security and surveillance, premises, and labeling.

What records do I need to keep, and for how long?

Financial, personnel, and operational records for at least seven years, produced to the DCC on request (4 CCR section 15037).

Should I self-report problems I find?

Sometimes – but not always in the same way. For significant issues, consult counsel first so you correct and, if appropriate, disclose in the manner that best protects your license.

Related Cannabis Legal Services

Want help running a compliance audit? Call Baghoomian Law at (818) 514-9272 or contact us online.

This post is for general informational purposes and is not legal advice. California cannabis and administrative law are fact-specific and change frequently; consult qualified counsel about any particular situation.

Client Reviews

I have over 20 years of experience in the cannabis industry, and none of the lawyers I have worked with come close to Baghoomian Law. Steve and his staff are incredibly responsive, hard-working, and...

Eric R.

I went from dreaming about owning a cannabis delivery business to actually owning a cannabis delivery business in less than four months. Steve is the most knowledgeable person I have ever met when it comes to...

Jack F.

It was a pleasure working with Steve and the team at Baghoomian Law. It took less than three months for me to get my provisional cannabis distribution license and start operations. He saved us a lot of time...

Artyom M.

Contact Us

Fill out the contact form or call us at (818) 514-9272 
to schedule your consultation.

Reach Out Today