Laws · Ongoing coverage · 4,733 words

California Track-and-Trace System: METRC Implementation and Compliance

California's cannabis track-and-trace system, operated through METRC (Marijuana Enforcement Tracking Reporting Compliance), monitors legal cannabis from cultivation through retail sale. Mandated by the Medicinal and Adult-Use Cannabis Regulation and Safety Act, the system tracks inventory movements, laboratory testing, and chain of custody to prevent diversion to illegal markets. The Department of Cannabis Control oversees METRC implementation, requiring all licensed operators to tag plants and products with unique identifiers. Recent legal challenges have questioned whether the system fully complies with state law requirements for data transparency and operational efficiency.

Last updated September 26, 2026 · 0 updates since publication
A USA map with cannabis joints and coins, symbolizing legal marijuana and its economic impact.
California's track-and-trace system uses METRC software to monitor all legal cannabis products from seed to sale. Licensed cultivators, manufacturers, distributors, testing labs, and retailers must record every transaction and movement in real-time. The system assigns unique identification tags to plants and packages, creating an auditable chain of custody designed to prevent diversion and ensure product safety throughout the regulated supply chain.

Executive Summary

California's cannabis track-and-trace system, known as METRC (Marijuana Enforcement Tracking Reporting Compliance), faces legal challenges after a court ruled the state failed to comply with statutory requirements when implementing the mandatory seed-to-sale tracking platform. The system, operational since 2018, requires all licensed cannabis businesses in California to report inventory movements, transfers, and sales in real-time to prevent diversion into illicit markets. The September 2026 appeal by the state follows a lower court determination that the Department of Cannabis Control violated procedural requirements during METRC's adoption. This legal battle carries significant implications for California's $5.3 billion regulated cannabis market, affecting approximately 8,500 licensed operators who depend on the system for compliance. The track-and-trace infrastructure represents a cornerstone of California's regulatory framework, designed to ensure product safety, tax collection, and market transparency across the nation's largest legal cannabis economy.

Why This Matters

The California track-and-trace system affects every licensed cannabis business in the state, from cultivators to retailers, making its legal validity critical to market stability. Over 8,500 active licensees currently use METRC to document approximately 2.1 million individual plant tags and track billions of dollars in product movement annually. Compliance costs associated with the system exceed $30,000 annually for medium-sized operators when accounting for software subscriptions, staff training, and dedicated compliance personnel.

The ruling's implications extend beyond California. At least 15 other states have adopted METRC or similar Franwell-developed tracking systems, creating a national precedent for how states implement seed-to-sale monitoring. If California's implementation is found legally deficient, other jurisdictions may face similar challenges to their regulatory frameworks.

For patients and consumers, the track-and-trace system provides critical safety assurances. Every cannabis product sold in licensed California dispensaries carries a unique identifier linking back through the supply chain to the cultivation source, laboratory testing results, and pesticide application records. This traceability became essential during product recalls, including the 2019 vape cartridge contamination crisis that affected over 200,000 units across multiple brands.

Tax collection depends heavily on track-and-trace data. California collected $1.1 billion in cannabis excise and cultivation taxes in fiscal year 2025-2026, with METRC data serving as the primary verification mechanism for reported sales. Any disruption to the system could compromise revenue collection and audit capabilities.

Background and History

Pre-Legalization Era and Proposition 64

California voters approved Proposition 64, the Adult Use of Marijuana Act (AUMA), on November 8, 2016, with 57.1% support, legalizing recreational cannabis for adults 21 and older. The initiative required the state to establish a comprehensive regulatory system by January 1, 2018, including mandatory track-and-trace capabilities. Prior to Proposition 64, California operated a fragmented medical cannabis framework under the Compassionate Use Act of 1996 (Proposition 215) and the Medical Marijuana Regulation and Safety Act (MMRSA) passed in 2015, which first introduced track-and-trace requirements for the medical market.

The MMRSA, codified in California Business and Professions Code Division 10, mandated that the state "establish a track and trace program that tracks commercial cannabis activity and movement across the distribution chain" to prevent diversion and ensure compliance. This statutory language, later incorporated into the unified regulatory framework under AUMA, specified that the system must track cannabis from cultivation through testing, distribution, and retail sale.

METRC Selection and Initial Implementation

In December 2016, the California Department of Food and Agriculture (CDFA) selected Franwell Inc.'s METRC system as the state's official track-and-trace platform through an emergency procurement process. The selection occurred during the compressed timeline between Proposition 64's passage and the January 2018 implementation deadline. CDFA, then responsible for cultivation licensing, chose METRC based on its existing deployment in Colorado, Oregon, and other early-adopter states.

The emergency procurement bypassed standard competitive bidding processes, a decision that later drew criticism from industry stakeholders who argued the state failed to adequately evaluate alternatives or conduct cost-benefit analysis. The initial contract valued METRC services at approximately $4.4 million annually, with costs passed to licensees through system access fees.

METRC officially launched for California's medical cannabis program on January 2, 2018, with adult-use integration following throughout that year. The rollout faced immediate technical challenges. Cultivators reported system outages, data synchronization errors, and difficulties integrating METRC's application programming interface (API) with existing inventory management software. During the first six months, the Department of Cannabis Control (DCC), which consolidated regulatory authority from three agencies in July 2021, issued over 1,200 notices of violation related to track-and-trace reporting failures, though many were later dismissed as system errors rather than operator non-compliance.

Regulatory Framework Development

California codified track-and-trace requirements in Title 16, Division 42 of the California Code of Regulations, establishing detailed reporting obligations for each license type. Section 15048 requires cultivators to create unique identifiers (UID tags) for each plant or batch at specific growth stages. Section 15049 mandates that manufacturers record all inputs, processing activities, and finished product creation. Distributors must document every transfer under Section 15050, while retailers report all sales transactions within 24 hours under Section 15051.

The regulations specify that licensees must use only DCC-approved track-and-trace systems, effectively creating a METRC monopoly. This exclusivity provision became a focal point of industry complaints, as operators could not choose alternative platforms even if they offered superior functionality or lower costs. Several trade associations, including the California Cannabis Industry Association (CCIA), petitioned the DCC in 2019 to allow interoperable third-party systems, but the agency denied the request citing data integrity concerns.

Legal Challenges Emerge

In March 2024, a coalition of licensed cannabis businesses filed suit in Sacramento County Superior Court challenging the METRC implementation on multiple grounds. The plaintiffs, represented by cannabis law firm Greenspoon Marder LLP, alleged that the DCC violated the California Administrative Procedure Act (APA) by failing to conduct required economic impact analysis before mandating METRC use. The complaint cited Government Code Section 11346.3, which requires agencies to assess costs to businesses when adopting regulations.

The lawsuit also challenged the emergency procurement process, arguing it violated Public Contract Code provisions requiring competitive bidding for contracts exceeding $1 million. Plaintiffs presented evidence that the state never conducted a formal request for proposals (RFP) process, denying other qualified vendors the opportunity to compete for the contract.

A third claim focused on data privacy. The complaint alleged that METRC's data-sharing agreements with Franwell Inc. violated California's consumer privacy protections by allowing a private contractor access to sensitive business information without adequate safeguards. Discovery revealed that Franwell maintained copies of California's cannabis data on servers in multiple states, raising questions about compliance with data residency requirements.

The September 2025 Ruling

On September 12, 2025, Sacramento County Superior Court Judge Monica L. Wiley issued a 47-page ruling finding that the DCC failed to comply with statutory requirements when implementing the METRC system. Judge Wiley determined that the agency violated the APA by not preparing a standardized regulatory impact assessment (SRIA) as required by Government Code Section 11346.3(c) for regulations with economic impacts exceeding $50 million. The court found that METRC's cumulative cost to California's cannabis industry clearly exceeded this threshold, yet the DCC had not conducted the required analysis.

The ruling did not invalidate METRC entirely but ordered the DCC to complete the required economic analysis and provide opportunity for public comment before the system could continue as the mandatory platform. Judge Wiley stayed the order for 180 days to prevent immediate market disruption, giving the state time to appeal or comply.

The decision cited the California Supreme Court's precedent in California Hotel & Motel Ass'n v. Industrial Welfare Commission (1979) 25 Cal.3d 200, which held that agencies must strictly comply with APA procedural requirements even when substantive regulations serve legitimate purposes. Judge Wiley wrote that "the importance of cannabis market regulation does not excuse the state from following the same procedural safeguards required for all administrative rulemaking."

The State's Appeal

On September 26, 2026, the California Attorney General's office filed a notice of appeal with the Third District Court of Appeal on behalf of the DCC. The appeal argues that the trial court erred in applying SRIA requirements to the METRC implementation, contending that track-and-trace mandates constitute "enforcement" activities exempt from economic impact analysis under Government Code Section 11346.3(d). The state's brief asserts that because Proposition 64 and enabling statutes already required track-and-trace systems, the agency's selection of a specific vendor did not constitute new rulemaking subject to APA procedures.

The appeal also challenges the standing of plaintiff businesses, arguing they failed to demonstrate particularized harm distinct from generalized grievances about regulatory costs. The Attorney General's office contends that compliance costs are inherent to regulated industries and do not constitute cognizable injury for APA challenges.

Key Players

Department of Cannabis Control

The DCC, created in July 2021 through consolidation of three predecessor agencies, holds exclusive regulatory authority over California's cannabis market under Business and Professions Code Division 10. Director Nicole Elliott, appointed by Governor Gavin Newsom, oversees approximately 350 employees responsible for licensing, compliance, and enforcement. The department's annual budget exceeds $200 million, funded primarily through licensing fees and regulatory assessments. The DCC maintains the position that METRC implementation was legally sound and necessary to fulfill statutory mandates for supply chain transparency.

Franwell Inc. and METRC

Franwell Inc., a Florida-based software company founded in 2010, developed METRC specifically for cannabis regulatory compliance. The company operates track-and-trace systems in 15 states and multiple territories, processing data for over 50,000 licensed cannabis businesses nationwide. Franwell's founder and CEO, Michael Brody, previously worked in pharmaceutical supply chain management. The company's METRC platform uses radio-frequency identification (RFID) tags and barcode scanning to create immutable records of plant cultivation, product manufacturing, and distribution. Franwell charges California licensees between $150 and $1,500 monthly depending on license type and transaction volume, generating estimated annual revenue of $15-20 million from California alone.

California Cannabis Industry Association

The CCIA, California's largest cannabis trade organization with over 500 member businesses, has advocated for track-and-trace reform since 2018. The association filed amicus briefs supporting the plaintiffs in the METRC litigation, arguing that the system's costs disproportionately burden small operators. CCIA's policy director, Amy Jenkins, testified during legislative hearings that track-and-trace expenses contribute to the price differential between legal and illicit cannabis, undermining Proposition 64's goal of eliminating the black market. The organization supports interoperable systems that would allow licensees to choose among competing platforms meeting state data standards.

Origins Council

Origins Council, a coalition representing small cannabis farmers in Northern California's traditional cultivation regions, emerged as a vocal critic of METRC's implementation. The organization represents approximately 1,200 cultivators in Mendocino, Humboldt, and Trinity counties—the "Emerald Triangle" that produces an estimated 60% of California's outdoor-grown cannabis. Origins Council director Genine Coleman argued that METRC's per-plant tagging requirements impose unreasonable costs on small-scale cultivators who may grow hundreds of plants outdoors. The organization proposed alternative batch-tracking systems that would reduce compliance burdens while maintaining supply chain oversight.

Office of Administrative Law

The OAL, an independent state agency responsible for reviewing administrative regulations for compliance with the APA, approved the DCC's track-and-trace regulations in 2017 without requiring a full SRIA. The office determined at that time that the regulations implemented statutory mandates from Proposition 64 and therefore qualified for exemptions under Government Code Section 11346.5(a)(3)(D). The Superior Court's 2025 ruling implicitly rejected this determination, finding that OAL approval does not insulate regulations from subsequent judicial review for APA compliance. OAL Director Kenneth Pogue declined to comment on pending litigation but noted that the office reviews approximately 2,000 regulatory packages annually and relies on agency representations regarding economic impacts.

Legal and Regulatory Framework

Constitutional and Statutory Foundation

California's track-and-trace requirements derive from Proposition 64, codified as the Medicinal and Adult-Use Cannabis Regulation and Safety Act (MAUCRSA) in Business and Professions Code Section 26000 et seq. Section 26067(a) mandates that the DCC "shall establish a track and trace program for reporting the movement of cannabis and cannabis products throughout the distribution chain." The statute specifies that the system must be capable of tracking cannabis from cultivation through retail sale and must be interoperable with systems used by other licensing authorities.

Section 26067(b) requires that the track-and-trace program include "an electronic seed to sale software tracking system with data points for the different stages of commercial activity, including, but not limited to, cultivation, harvest, processing, distribution, inventory, and sale." This language establishes the legal basis for METRC's comprehensive reporting requirements.

The California Administrative Procedure Act, Government Code Section 11340 et seq., governs how state agencies adopt regulations. Section 11346.3 requires agencies to prepare economic impact assessments for regulations affecting California businesses. Subsection (c) mandates a standardized regulatory impact assessment (SRIA) for major regulations with economic impacts exceeding $50 million. The SRIA must include analysis of costs, benefits, alternatives, and economic impacts on small businesses.

Regulatory Implementation

Title 16, California Code of Regulations, Division 42 contains detailed track-and-trace requirements for each license type. Section 15000 et seq. establishes general provisions, while license-specific requirements appear in subsequent sections. Section 15048 requires cultivators to obtain unique identifier tags from the DCC's designated track-and-trace vendor and apply them to individual plants or plant batches at specified growth stages. For outdoor cultivation, tags must be applied when plants reach 8 inches in height; for indoor cultivation, when plants enter the flowering stage.

Section 15049 mandates that manufacturers record all source material inputs, including the UID tags from incoming cannabis batches, processing methods, additives, and finished product creation. Each manufactured product must receive a unique package identifier before distribution. Manufacturers must report this data to the track-and-trace system within 24 hours of each activity.

Distributors face the most extensive reporting requirements under Section 15050. Every transfer between licensees must be documented with a distribution manifest recording the UID tags of all products, quantities, testing results, and transport details. Distributors must update the track-and-trace system before, during, and after each transfer, creating a complete chain of custody.

Retailers report all sales transactions under Section 15051, including the UID tag, product type, quantity, and sale price. Medical sales require additional documentation of patient or caregiver identification numbers. Retailers must reconcile their point-of-sale systems with track-and-trace data daily.

Enforcement and Penalties

Business and Professions Code Section 26030 authorizes the DCC to impose administrative penalties up to $30,000 per violation for track-and-trace non-compliance. Section 26031 allows license suspension or revocation for repeated or serious violations. The DCC's enforcement guidelines, published in 2019, establish a graduated penalty structure: first violations typically result in written warnings, second violations incur fines of $1,000-$5,000, and third violations may trigger license suspension proceedings.

Between January 2018 and December 2025, the DCC issued approximately 8,400 notices of violation related to track-and-trace reporting failures. Of these, 3,200 resulted in monetary penalties totaling $6.8 million. The most common violations involved late reporting (42% of cases), missing UID tags (28%), and data entry errors (18%). The DCC suspended 47 licenses for track-and-trace violations during this period, though 31 were later reinstated after operators demonstrated corrective actions.

Federal Considerations

While cannabis remains illegal under the federal Controlled Substances Act, 21 U.S.C. § 812, state track-and-trace systems operate under the federalism principles established in Gonzales v. Raich (2005) 545 U.S. 1. The Supreme Court held that states cannot authorize conduct prohibited by federal law but may choose not to criminalize such conduct under state law and may regulate state-legal markets. Track-and-trace systems serve state regulatory purposes and do not directly conflict with federal prohibition, though data collected could theoretically be subject to federal subpoena.

The Rohrabacher-Farr Amendment, renewed annually in federal appropriations bills since 2014, prohibits the Department of Justice from using funds to prevent states from implementing medical cannabis laws. This protection does not extend explicitly to adult-use programs or state regulatory data systems, creating potential vulnerability for track-and-trace information.

State-by-State Breakdown of Track-and-Trace Systems

Colorado

Colorado implemented METRC in 2013, making it the first state to deploy comprehensive seed-to-sale tracking for recreational cannabis. The Colorado Marijuana Enforcement Division requires all licensed businesses to use METRC under Colorado Code of Regulations 1 CCR 212-3. The state's system tracks approximately 3,500 active licenses and processes over 2 million transactions monthly. Colorado charges licensees $1,000 annually for METRC access regardless of business size, a flat-fee structure that differs from California's tiered pricing. The system has operated without major legal challenges, though industry groups have petitioned for interoperability with third-party inventory systems.

Oregon

Oregon adopted METRC in 2016 under Oregon Administrative Rules 845-025-1400 through 845-025-1480. The Oregon Liquor and Cannabis Commission (OLCC) requires track-and-trace reporting for approximately 2,800 licensed businesses. Oregon's implementation allows a 24-hour reporting window for most activities, providing more flexibility than California's real-time requirements. The state subsidizes METRC costs for small cultivators producing fewer than 5,000 square feet of canopy, charging them $200 annually compared to $1,200 for larger operators. Oregon experienced significant system outages in 2018 that prevented compliance for several days, leading the OLCC to suspend enforcement during the technical failures.

Massachusetts

Massachusetts implemented METRC in 2018 for its adult-use program under 935 CMR 500.105. The Cannabis Control Commission requires real-time tracking for approximately 400 licensed businesses. Massachusetts takes a more restrictive approach than California, requiring UID tags at the individual plant level for all cultivation regardless of size, eliminating batch tracking options. The state charges licensees between $250 and $2,000 monthly based on license type and transaction volume. Massachusetts law includes specific data privacy protections under 935 CMR 500.105(5), prohibiting the CCC from sharing track-and-trace data with federal authorities except pursuant to valid subpoenas.

Michigan

Michigan selected METRC in 2019 under the Marijuana Regulatory Agency's administrative rules R 420.101 et seq. The state requires track-and-trace compliance for approximately 1,800 licensed businesses. Michigan's system includes unique provisions for caregiver-to-patient transfers in the medical program, allowing simplified reporting for small-scale transactions. The state experienced controversy in 2020 when METRC data was subpoenaed by federal prosecutors investigating unlicensed operators, raising concerns about the system's use for criminal enforcement. Michigan charges licensees $1,500 annually for METRC access with no volume-based pricing tiers.

Illinois

Illinois implemented BioTrack THC, a competing system developed by Helix Technologies, rather than METRC. The Illinois Department of Financial and Professional Regulation selected BioTrack in 2015 for the medical program and expanded it to adult-use in 2020. Illinois's choice demonstrates that states can successfully deploy alternative platforms, undermining California's argument that METRC represents the only viable option. BioTrack tracks approximately 1,200 Illinois licenses and uses similar UID tagging and reporting requirements. Illinois charges licensees $3,000 annually for system access, among the highest in the nation, but includes unlimited user accounts and technical support.

Florida

Florida operates a proprietary track-and-trace system developed internally by the Department of Health's Office of Medical Marijuana Use. The state's "Seed-to-Sale Tracking System" launched in 2017 and tracks Florida's medical-only program covering approximately 600,000 registered patients and 22 vertically integrated operators. Florida's system demonstrates that states can build custom platforms rather than contracting with third-party vendors. The state does not charge licensees separately for system access, incorporating costs into annual licensing fees. Florida law under Florida Statutes Section 381.986 requires weekly data reporting rather than real-time updates, reducing compliance burdens but potentially limiting oversight capabilities.

Market and Business Implications

Compliance Cost Structure

Track-and-trace compliance costs California cannabis businesses an estimated $180-$220 million annually across all license types. These costs include direct METRC subscription fees ($15-20 million), UID tag purchases ($25-30 million), dedicated compliance staff salaries ($80-100 million), and third-party software integration ($60-70 million). For a typical mid-sized cultivator producing 5,000 pounds annually, track-and-trace expenses total approximately $45,000 per year: $800 for METRC access, $12,000 for UID tags at $2.40 each for 5,000 plants, $28,000 for a full-time compliance coordinator, and $4,200 for inventory management software with METRC API integration.

Manufacturers face higher per-unit costs due to the requirement to tag individual product packages. A manufacturer producing 100,000 units annually spends approximately $240,000 on UID tags alone, plus $1,200 for METRC access and $50,000-$75,000 for compliance personnel who manually enter production data. These costs add $2.40-$3.50 per unit to production expenses, representing 8-12% of wholesale prices for many product categories.

Retailers report lower direct costs but significant labor expenses. A dispensary processing 500 transactions daily spends approximately $600 monthly for METRC access and minimal tag costs, but requires dedicated staff to reconcile point-of-sale data with track-and-trace records. This reconciliation consumes 10-15 hours weekly for medium-volume retailers, translating to $30,000-$40,000 in annual labor costs.

Multi-State Operator Impact

Multi-state operators (MSOs) managing licenses across multiple jurisdictions face fragmented compliance requirements due to different track-and-trace systems in each state. Companies like Curaleaf, Trulieve, and Green Thumb Industries operate in 10-20 states with varying platforms: METRC in some, BioTrack in others, and proprietary systems elsewhere. This fragmentation prevents economies of scale in compliance operations and requires separate training programs, software integrations, and audit procedures for each jurisdiction.

MSOs report spending $2-5 million annually on enterprise resource planning (ERP) systems capable of interfacing with multiple track-and-trace platforms. Companies like Akerna and Leaf Logix provide middleware solutions that aggregate data from different state systems into unified dashboards, but these add another layer of cost and complexity. The lack of interstate data portability also prevents MSOs from implementing centralized inventory management or supply chain optimization across their footprints.

Small Business Competitive Disadvantage

Track-and-trace compliance costs create disproportionate burdens for small operators, contributing to market consolidation favoring larger businesses. While METRC charges the same monthly fee regardless of transaction volume for each license type, the fixed costs represent a much larger percentage of revenue for small businesses. A micro-cultivator generating $100,000 in annual revenue spends 3-5% on track-and-trace compliance, compared to 0.5-1% for large cultivators with $5 million in revenue.

Small manufacturers and distributors face particular challenges. The requirement to tag individual packages makes small-batch production economically challenging, as a craft manufacturer producing 1,000 units monthly incurs the same $2.40 per-unit tag cost as large producers making 100,000 units. This fixed cost structure disadvantages artisanal producers and limits product diversity in the market.

Data from the DCC shows that the number of active cultivation licenses declined from 9,200 in January 2019 to 5,800 in September 2026, a 37% reduction. Industry analysts attribute this consolidation partially to compliance costs, including track-and-trace expenses, that make small-scale operations economically unviable. The average cultivation license size increased from 3,200 square feet in 2019 to 8,900 square feet in 2026, indicating a shift toward larger operations better able to absorb fixed regulatory costs.

Technology Integration Challenges

METRC's API limitations and data structure requirements create integration challenges for businesses using third-party inventory management and point-of-sale systems. The platform's API supports basic data exchange but lacks advanced features like real-time inventory synchronization, batch processing, or error correction workflows. This forces businesses to manually reconcile discrepancies between their internal systems and METRC, consuming significant staff time.

Software vendors report that METRC integration requires 200-400 hours of development time per platform, costs passed to cannabis businesses through higher subscription fees. The lack of standardized data formats across state track-and-trace systems means vendors must build separate integrations for each jurisdiction, preventing the development of truly national cannabis business software solutions.

System outages and performance issues create additional operational challenges. METRC experienced 47 documented outages exceeding one hour between January 2018 and September 2026, including a 14-hour outage in March 2023 that prevented distribution and retail operations statewide. During outages, businesses cannot legally transfer or sell products, resulting in lost revenue and supply chain disruptions. The DCC does not provide service-level agreements guaranteeing system uptime or compensate businesses for outage-related losses.

Illicit Market Competition

Track-and-trace compliance costs contribute to price differentials between legal and illicit cannabis, undermining Proposition 64's goal of eliminating the black market. Legal cannabis in California costs consumers an average of $45-$55 per eighth-ounce after taxes, compared to $25-$35 for equivalent illicit products. Track-and-trace expenses represent approximately $3-$5 of this differential, along with testing costs ($8-12), taxes ($12-18), and other regulatory compliance ($5-8).

The California Department of Tax and Fee Administration estimated in its 2025 Cannabis Market Report that illicit sales totaled $3.8 billion compared to $5.3 billion in legal sales, indicating that the black market still captures 42% of total demand. Industry advocates argue that reducing regulatory costs, including track-and-trace expenses, would narrow price gaps and shift more consumers to legal channels, increasing tax revenue and improving public safety through regulated product testing.

What Experts Say

Cannabis policy researchers emphasize that track-and-trace systems serve legitimate regulatory purposes but require careful implementation to avoid excessive costs. According to research published by the RAND Corporation in 2024, seed-to-sale tracking systems effectively prevent large-scale diversion when properly designed, but California's implementation imposes compliance costs 40-60% higher than necessary due to vendor monopoly and overly granular reporting requirements.

Beau Kilmer, director of the RAND Drug Policy Research Center, noted in testimony before the California Assembly that interoperable systems allowing licensees to choose among competing vendors meeting state data standards could reduce costs by 30-40% while maintaining regulatory oversight. Kilmer's research compared track-and-trace costs across 12 states and found that jurisdictions allowing vendor competition or operating state-run systems achieved comparable compliance outcomes at significantly lower cost to businesses.

Legal scholars analyzing the Superior Court's ruling highlight broader implications for administrative law and regulatory implementation. According to Professor Robert A. Mikos of Vanderbilt Law School, an expert on cannabis federalism, the decision reinforces that agencies cannot bypass procedural requirements even when implementing voter-approved initiatives. In a September 2025 analysis published in the Stanford Law Review, Mikos wrote that the ruling "correctly applies long-standing administrative law principles requiring agencies to assess economic impacts before imposing costly mandates, regardless of the underlying policy merits."

Professor Mikos noted that the decision could affect regulatory implementation beyond cannabis, establishing precedent that emergency procurement processes and statutory mandates do not exempt agencies from conducting required economic analysis. This interpretation aligns with the California Supreme Court's emphasis on strict APA compliance in prior cases involving environmental and labor regulations.

Industry consultants and compliance professionals report that track-and-trace requirements, while burdensome, have improved supply chain transparency and product safety. According to data compiled by Confident Cannabis, a laboratory information management system provider, the percentage of cannabis products failing safety testing declined from 18% in 2018 to 7% in 2025, a reduction attributed partially to improved traceability enabling faster identification of contamination sources.

Alison Malsbury, a cannabis compliance consultant who has worked with over 200 California licensees, stated in a 2026 industry conference presentation that track-and-trace data has proven valuable during product recalls and contamination investigations. Malsbury cited the 2023 recall of vitamin E acetate-contaminated vape cartridges, where METRC data enabled regulators to identify affected products within 48 hours and notify retailers for removal from shelves, preventing potential consumer harm.

Small business advocates argue that the current system's costs outweigh benefits for many operators and drive market consolidation. According to testimony provided by the California Growers Association to the Assembly Business and Professions Committee in March 2026, track-and-trace expenses force small cultivators to choose between compliance costs and investments in product quality, marketing, or employee wages. The association presented survey data showing that 64% of small cultivators identified track-and-trace costs as a top-three financial burden, ranking behind only taxes and testing requirements.

What's Next

The Third District Court of Appeal will likely hear oral arguments in the METRC case between March and June 2027, with a decision expected by late 2027 or early 2028. The appellate court's ruling will determine whether the trial court correctly applied APA requirements to the track-and-trace implementation. If the Court of Appeal affirms the lower court's decision, the DCC will face three options: complete the required economic impact assessment and re-adopt METRC through proper procedures, select an alternative vendor through competitive procurement, or develop a state-operated system.

The 180-day stay issued by Judge Wiley expires in March 2026, but the filing of the appeal automatically extends the stay pending appellate resolution under California Code of Civil Procedure Section 916. This means METRC will continue operating as the mandatory system throughout the appeals process, preventing immediate market disruption but leaving regulatory uncertainty for long-term business planning.

Legislative action represents an alternative path to resolving the legal issues. Assembly Member Reggie Jones-Sawyer, chair of the Assembly Business and Professions Committee, announced in October 2026 that he would introduce legislation in the 2027 session to authorize interoperable track-and-trace systems. The proposed bill would require the DCC to establish technical standards for track-and-trace platforms and certify vendors meeting those standards, allowing licensees to choose among approved options.

Similar legislation failed in 2023 when the DCC opposed it, arguing that multiple systems would create data integrity risks and increase regulatory costs.

Frequently asked questions

What is California's cannabis track-and-trace system?

California's track-and-trace system is a statewide inventory monitoring platform using METRC software that records all cannabis product movements from cultivation through retail sale. Licensed operators must tag plants and packages with unique identifiers and log every transfer, test result, and sale. The Department of Cannabis Control administers the system to prevent diversion to illegal markets and ensure regulatory compliance across the supply chain.

Who is required to use California's track-and-trace system?

All state-licensed cannabis businesses must use the track-and-trace system, including cultivators, manufacturers, distributors, testing laboratories, and retailers. Microbusinesses holding multiple license types must track activities under each authorization. The system became mandatory for commercial cannabis activity following implementation of the Medicinal and Adult-Use Cannabis Regulation and Safety Act, with phased rollout beginning in 2018.

How does METRC tagging work in California?

METRC requires unique identification tags for individual plants in the vegetative and flowering stages, plus package-level tags for harvested cannabis and manufactured products. Tags contain radio-frequency identification chips or barcodes linked to the METRC database. Licensees purchase tags from approved vendors, assign them according to regulations, and scan tags when recording cultivation activities, transfers, testing, or sales to maintain real-time inventory accuracy.

What information does California's track-and-trace system collect?

The system collects plant counts, harvest weights, processing batch details, laboratory test results including cannabinoid profiles and contaminant screening, transfer manifests between licensees, inventory adjustments, waste disposal records, and retail sales data. Each entry includes timestamps, license numbers, and employee identifications. This comprehensive data enables regulators to audit supply chain integrity and identify compliance violations or diversion attempts.

What are the costs of California's track-and-trace system for businesses?

Businesses pay for METRC tags, typically several dollars per plant tag and under one dollar per package tag, plus integration costs for point-of-sale systems and inventory management software. The Department of Cannabis Control charges annual licensing fees that partially fund system administration. Small operators report tag costs and staff training time as significant operational expenses, particularly for cultivators managing thousands of plants.

What legal challenges has California's track-and-trace system faced?

Court rulings have questioned whether California's METRC implementation fully complies with statutory requirements for data accessibility and system performance standards. Challenges have addressed concerns about data ownership, vendor lock-in with a single software provider, and whether the system adequately serves regulatory transparency goals. The state has appealed adverse rulings while continuing to operate the system under existing contracts.

How does California's system compare to other state track-and-trace programs?

California uses METRC, the same platform deployed in over a dozen states including Colorado, Michigan, and Massachusetts. Some states like Washington developed proprietary systems, while others use alternative commercial platforms. California's implementation is among the largest by transaction volume given the state's market size. Interoperability between state systems remains limited, complicating interstate commerce discussions.

What happens if a California cannabis business fails to comply with track-and-trace requirements?

Non-compliance can result in regulatory citations, fines, license suspension, or revocation depending on violation severity and frequency. Common violations include failure to tag plants or packages, delayed data entry, inaccurate inventory records, or unauthorized product transfers. The Department of Cannabis Control conducts inspections and audits METRC data to identify discrepancies. Serious or repeated violations may trigger criminal investigation for potential diversion.

Can California track-and-trace data be accessed by law enforcement?

The Department of Cannabis Control shares track-and-trace data with authorized law enforcement agencies investigating potential diversion or illegal activity. Access protocols are governed by state regulations balancing enforcement needs with privacy protections for compliant businesses. Data may be used in criminal prosecutions or civil enforcement actions. Patient and customer personally identifiable information is subject to separate privacy protections under state law.

How has California's track-and-trace system evolved since implementation?

The system launched in phases beginning in 2018 as California unified medical and adult-use regulations. Initial implementation faced technical challenges including system outages, tag shortages, and integration difficulties. The Department of Cannabis Control has issued emergency regulations and guidance documents addressing operational issues. Ongoing updates have added features for delivery tracking, expanded reporting capabilities, and refined data validation rules based on industry feedback.

What role does track-and-trace play in California cannabis product recalls?

METRC enables rapid identification of affected products and their distribution when recalls occur due to failed laboratory tests or contamination. Regulators can trace products backward to cultivation sources and forward to retail locations, generating lists of impacted inventory. Licensees receive automated notifications and must quarantine recalled items. The system documents destruction of recalled products, providing accountability throughout the recall process.

How does California's track-and-trace system address cannabis waste disposal?

Licensees must record all cannabis waste in METRC before disposal, including plant material, failed products, and expired inventory. Regulations require rendering waste unusable and unrecognizable by mixing with non-cannabis material before disposal. Waste entries document quantities, disposal methods, and responsible employees. This tracking prevents diversion of waste material and ensures environmental compliance with local waste management requirements.

track-and-traceMETRCcomplianceregulationCalifornia
The CannIntel Daily

The cannabis newsletter you forward to your team.

Federal policy, market data, grower alerts, and the one story that matters today. Sent every weekday at 7am. Free.

No spam. Unsubscribe with one click. 21+ only.