A storefront
licensed right.

A retail license in California isn't a single document. It's a posture: a set of ongoing obligations you maintain every day your license is active, every hour between 6:00 AM and 10:00 PM that the floor is open. These are the requirements DCC verifies most often at inspection — and the ones we audit against before any inspector ever does.

Ten requirements, in detail

• Age verification at entry and at sale. Adult-use customers must be 21 or older; medicinal patients must be 18 or older with a valid physician recommendation. Acceptable identification is a government-issued photo ID, military photo ID, or passport (US or foreign), unexpired, with a photo that matches the customer. ID is checked at every transaction — including for recognized regular customers. Storefronts typically run a two-stage check: at the door before entry to the limited-access retail floor, and again at the POS (CCR § 15407, BPC 26140).
• Daily purchase limits per customer (CCR § 15409). Adult-use: 28.5 grams of non-concentrate cannabis (flower), 8 grams of concentrate including the cannabinoid content of edibles and vape carts, and 6 immature plants per customer per day. Medicinal: 8 ounces (226 grams) of medicinal cannabis or higher per a specific physician recommendation, and 12 immature plants. The POS must aggregate across same-day visits — multiple small purchases still sum to the daily limit.
• Hours of operation: 6:00 AM to 10:00 PM (or stricter local). In-store transactions must be completed by 10:00 PM. Delivery drivers must return to the licensed premises no later than 10:00 PM, which means dispatch software must enforce a return-time constraint, not just a last-order cutoff. Local jurisdictions may set narrower hours and frequently do.
• SB 540 retailer brochure (effective March 1, 2025). Display the DCC-mandated consumer-information brochure at every point of sale and offer each new consumer a copy. The display requirement applies in-person and online at time of online purchases — the brochure must be presented in the checkout flow, not buried in the footer.
• POS with METRC integration. Every sale syncs to METRC as a package adjustment within the 24-hour reporting window. The POS rule set enforces the CCR 15409 daily limits, age-gates checkout against scanned ID, and stacks the tax line items correctly: the 15% excise under AB 564 (October 1, 2025 through June 30, 2028), state and local sales tax with the medicinal exemption applied for state-ID-card holders, and the local cannabis business tax at the jurisdictional rate.
• Security and surveillance (CCR § 15044–15047). 24/7 video at minimum 1280×720 resolution and 15 fps, 90-day retention, coverage of every limited-access area, ingress, egress, retail floor, POS station, vault, and parking. Alarm system with central-station monitoring, backup power, and after-hours, no cannabis goods displayed on the retail floor.
• Limited-access area separation. Back-of-house storage and the retail floor (after the entry ID check) are limited-access areas under CCR § 15042. Only authorized employees, ID-verified customers, and authorized visitors. Visitor logs and employee badging are mandatory.
• Packaging and labeling check at point of sale. No untested product, no expired product, no “cannabis products attractive to children” (a category DCC explicitly prohibits). Exit packaging must meet the child-resistant requirement; primary packaging must carry the universal symbol and government warning.
• Delivery operations (Type 9 or Type 10 with delivery). GPS-tracked employee-driven vehicles (no gig drivers) under CCR §§ 15600–15633, locked container, METRC delivery manifest carried in transit, ID and signature recorded at the door, no porch drop-off, and the back-by-10-PM constraint on the round trip. SB 1186 preempts local bans on medicinal delivery; verify currency with counsel before relying on the preemption to deliver into a delivery-prohibited city.
• Local authorization, training, and records. Local CUP or retail permit with zoning compliance, sensitive-use setbacks, and the ordinance's hours/density rules. CCR § 15039 staff training records with annual refresh, documented per employee. CCR § 15037 record-keeping with 7-year retention covering sales, manifests, COAs, surveillance footage, and refusal logs.

Format and delivery

Each requirement above is documented in your engagement vault as a one-page operational standard plus its underlying SOP excerpt, citation index, and audit checklist. Files are PDF for the regulatory packet plus editable source (Word, CAD-equivalent, Excel) for documents you will revise over time, version-controlled by date and form number, and indexed to the CCR section the requirement satisfies. Naming convention is form-or-CCR-then-revision-date so the version DCC reviewed is always retrievable.

Defensibility anchor

Every requirement above is anchored to a specific BPC section, CCR subsection, SB or AB number, or DCC form — visible in the operational standard, in the SOP header, and in the engagement's citation index. The anchor is the difference between an SOP that survives an unannounced inspection and one that does not. When DCC asks why a procedure is what it is, the answer is in the document itself, not in someone's recollection.

What is not included

This requirement set does not include the underlying business decisions (capital structure, brand selection, product mix, pricing, hiring), CDTFA tax filings (handled under our Financial & Tax Advisory service), legal opinions or representation before an administrative law judge (referred to retained counsel), the local-jurisdiction permit process itself (handled under our Local Permit Authorization service), or items requiring a member of the State Bar to sign. Where a Notice to Comply is already issued or an SB 1186 preemption dispute is live with a city, we coordinate with your retained counsel rather than running parallel.

The violations listed below aren't theoretical. They are the ones DCC inspectors write up most often at retail operations, drawn from the agency's published Disciplinary Guidelines and its 2024 enforcement recap (303 disciplinary actions: 230 suspensions plus 73 denials or revocations, against a licensee base of roughly 8,400 annual and provisional). Most are fixable — but only if you know about them before the citation hits the record.

Once the DCC application is submitted and approved, switching subtypes means restarting the local permit process, paying new application fees, and waiting out another DCC review cycle. The choice is upstream of every operational and capital decision: lease size, build-out, staffing model, vehicle fleet, POS configuration, and inventory carrying cost. We make the call in week one of the engagement, against your jurisdiction's local-ordinance posture and your capital plan.

Escalation path

When the matter crosses into counsel territory, we coordinate with your retained counsel on a single record rather than running a parallel track. Triggers include: equity dispute among Owners, undisclosed interest discovered late, an SB 1186 medical-delivery preemption dispute with a city, a Notice to Comply or Order to Show Cause already issued, an underage-decoy sting failure, or any matter requiring formal legal advice or representation before an administrative law judge. Where you do not yet have retained counsel and the matter requires one, we make the introduction; we do not act as counsel.

How we draw the boundary with you

You own the business decisions: capital structure, build-out scope, brand selection, product mix, hiring, pricing, lease economics, and signatures. We own the regulatory packet around those decisions: the subtype call, every form, every disclosure, every diagram, the POS rule set, the SOPs, the surveillance plan, and the deficiency-response cycle. The boundary is documented in the engagement letter line-by-line and confirmed on the kickoff call. When a question arises mid-engagement that crosses the line, the coordinator flags it the same day rather than absorbing it silently.

What is explicitly out of scope

Out of scope: real-estate transactions and lease negotiation (referred to a real-estate broker or counsel familiar with cannabis-specific lease provisions including federal-forfeiture and change-of-control clauses), capital raises and investor solicitation (referred to your placement agent or counsel), any matter requiring a member of the State Bar to sign, the local-jurisdiction permit process itself (handled under our Local Permit Authorization service), CEQA document drafting where the local lead agency requires its own consultant, M&A diligence and structuring (handled under our Strategic Expansion service), CDTFA tax filings and 280E structuring (handled under our Financial & Tax Advisory service — note the April 22, 2026 DOJ Schedule III rescheduling for state-licensed medicinal cannabis where it touches the medical channel), and any matter that would conflict with our engagement's named scope.

Most operators hit the same obstacles — zoning, DCC deficiency notices, CEQA delays, missing ownership documents, POS rule sets that do not aggregate same-day visits, an SB 540 brochure flow that was not built into the online checkout. None of them are mysteries. They are preventable with the right sequencing. This is the sequence we use, week by week.

The playbook

• Licensing strategy & subtype call (Week 1–2). We assess business structure, capital plan, and target premises. We map the local pathway against the DCC local-ordinances dataset (some cities ban Type 10 storefronts but allow Type 9 delivery, some run a competitive scoring window with limited slots, some are ministerial with zoning compliance only). Sensitive-use setbacks are field-checked on a parcel map before lease commitment. The single most expensive early-stage error is committing to a lease in a jurisdiction that does not allow the subtype.
• Ownership, FIH, LiveScan (Week 2–4). Form 9101 prepared for every Owner at the ≥20% CCR 15003 threshold and every officer, director, or person with control. CCR 15004 Financial Interest Holder schedule covering passive investors, profit-share lenders, and percentage-rent landlords. LiveScan coordinated through a DOJ-listed operator and sequenced so background-check results return before state filing. Criminal-history narratives drafted alongside the submittals under CCR 15002(c).
• SOPs, premises, POS, surveillance (Week 3–6). Form DCC-LIC-019 SOP package written to your floor plan, your equipment, your staffing, and your product mix. CCR 15006 premises diagram drawn to scale with POS zones, the limited-access boundary, vault location, and every camera field of view. The POS rule set is configured against CCR 15409 and tested with synthetic transactions covering the daily limit aggregated across same-day visits, age-gate refusal, and the AB 564 15% excise plus state and local sales tax with the medicinal exemption applied for state-ID-card holders. Surveillance plan to CCR 15044–15047. SB 540 brochure sourced and the in-person and online point-of-sale display flow built.
• Local authorization & supporting forms (Week 5–8). Local cannabis license, conditional use permit, or competitive award is finalized — the BPC 26055(a) prerequisite. Form 9206 landowner consent collected with the cannabis-use lease addendum. Form 9205 LPA attestation handled at the post-July-2024 10-employee threshold. Form 8113 surety bond at the $5,000 minimum per premises payable to the State of California. CEQA opened with the local lead agency under CCR 15010 — Notice of Exemption, MND, or full EIR.
• Portal submission & quality review (Week 7–10). Line-by-line pre-submission QA against the DCC retail checklist, scrubbed against the live DCC compliance-action record. Complete package filed through the CLEaR retail and distribution portal with submission confirmation, application reference number, and a status-tracking dashboard updated weekly. Application fees paid at submission. Active monitoring of the application record begins the same day.
• Deficiency response, inspection, METRC, open-doors (Week 10+). Every DCC notice answered inside the CCR 15002(d) ten-business-day window. CCR 15011 pre-licensure inspection staged: premises matched to the diagram, cameras verified against CCR 15045 fields of view, the SB 540 brochure displayed at every POS station and the online-checkout flow live. License issues, METRC activation runs through the state-administered Franwell portal, CDTFA seller's permit verified, and a 60-day post-licensure compliance calendar handed off on day one.

Duration and rhythm

From kickoff to portal submission is typically 8–10 weeks for a complete retail application; from submission to issuance is another 60 business days at the DCC's target pace, extended where LiveScan returns a hit, where deficiency notices stack, where pre-licensure inspection scheduling slips, or where CEQA documentation requires further iteration with the local lead agency. End-to-end realistic timelines run 6–14 months from first local conversation through to first sale, with high-competition markets (Los Angeles, San Diego, Oakland) trending to the upper end. The 60-day post-licensure handoff bridges the gap between issuance and operations.

Who you work with each phase

One named licensing coordinator owns the engagement from intake through the 60-day post-licensure handoff — the same person on every status call, every DCC notice, every submission. Specialist contributors come in at the milestones their work demands: a CCR 15006 diagram drafter at week 3–6, a LiveScan logistics coordinator at week 2–4, a POS rule-set engineer at week 5–8 to configure and test the daily-limit and tax-stack logic against your selected POS (Dutchie, Flowhub, Treez, Cova, or Meadow), and a CEQA reviewer where the local lead agency requires one. Where the matter touches counsel territory, we coordinate with your retained counsel on a single record, never a parallel one.

Everyone getting into California retail asks these same things in roughly this order. We have captured our honest, specific answers below — every one anchored to a CCR section, BPC section, or named bill.

• What is the difference between Type 9 and Type 10? Type 10 is storefront retail (brick-and-mortar dispensary) where customers may enter, browse, and purchase, with optional delivery operations layered in. Type 9 is non-storefront delivery-only retail — no public-facing entrance, orders placed online or by phone, delivery to the customer's address from a non-public licensed premises. Type 9 has lower capital outlay ($180K–$500K versus $650K–$2M+ for Type 10) and tends to be available in jurisdictions where Type 10 caps are closed but delivery is permitted. Many cities cap Type 10 separately from Type 9 — the DCC local-ordinances dataset is the authoritative source.
• How do I get a retail license if my city has a cap or lottery? Many California cities cap total retail licenses or run a competitive scoring window with narrow application periods. We pull the local-ordinance posture from the DCC dataset, analyze the scoring rubric, prepare the competitive packet, and calendar future cap expansions where the ordinance signals one. Local relationships and timing both matter — the strongest packet filed at the wrong moment loses to a weaker one filed inside the open window.
• What are the daily purchase limits per customer? Adult-use (21+) under CCR § 15409: 28.5 grams of non-concentrate cannabis (flower), 8 grams of concentrate including the cannabinoid content of edibles and vape carts, and 6 immature plants per customer per day. Medicinal (18+ with a valid physician recommendation): 8 ounces (226 grams) of medicinal cannabis or higher per the specific physician recommendation, and 12 immature plants. The POS must aggregate across same-day visits — multiple small purchases sum to the daily limit, and multi-store retailers increasingly share purchase data across locations to enforce limits retailer-wide.
• Do I need to verify age at entry AND at sale? Yes. Storefronts typically run a two-stage check under CCR § 15407: at the door before entry to the limited-access retail floor, and again at the POS where the ID is scanned for the sale record. Acceptable identification is a government-issued photo ID, military photo ID, or passport (US or foreign), unexpired, with a photo that matches the customer. Entry failures and sale failures are separate violations, and DCC and local LE conduct underage decoy stings periodically.
• Can I sell to tourists? Yes — California retail serves all adult-use purchasers 21 and older, including out-of-state residents, with valid government-issued photo identification. Out-of-state medical cards do not grant medicinal-patient privileges in California; out-of-state visitors purchase under the adult-use limits. Daily purchase limits still apply per customer regardless of state of residence.
• What is required for delivery? Delivery requires Type 9 (non-storefront delivery-only) or a Type 10 storefront that operates delivery alongside the retail floor, governed by CCR §§ 15600–15633. The driver must be an employee of the licensee (no gig drivers), 21 or older, with a Live Scan completed; the vehicle is GPS-tracked with a locked container separate from the passenger area, the METRC delivery manifest carried in transit, and ID and signature recorded at the door (no porch drop-off). Drivers must return to the licensed premises no later than 10:00 PM, which means dispatch software enforces a return-time constraint on the round trip, not just a last-order cutoff. SB 1186 preempts local bans on medicinal delivery, though the doctrine is contested in some cities — verify currency with counsel before relying on the preemption to deliver into a delivery-prohibited jurisdiction.
• What is the SB 540 retailer brochure requirement? SB 540 took effect on March 1, 2025 and requires retailers and microbusinesses with retail activities to display the DCC-mandated consumer-information brochure at every point of sale and offer each new consumer a copy. The display requirement applies in-person and online at time of online purchases — the brochure must be presented in the checkout flow, not buried in the site footer. Inspectors look for the physical display at POS stations and confirm the online checkout flow; missing brochures are easy citations and were the most common new-rule citation in 2025.
• What is the current excise tax on retail cannabis? Under AB 564, the state cannabis excise tax is 15% of gross retail receipts effective October 1, 2025 through June 30, 2028, replacing the 19% rate that briefly applied between July 1 and September 30, 2025. State and local sales tax also applies to adult-use sales (medicinal cannabis is exempt for qualified patients with a state-issued ID card). Local cannabis business taxes vary by jurisdiction — typically 1–10% of retail receipts. The receipt must show the excise, sales, and local tax line items separately, and the POS rule set must stack them correctly to avoid back-tax exposure at audit.
• Can I advertise on Instagram, TikTok, or Google? Restricted. CCR § 17030 requires that the audience for any advertising be at least 71.6% age 21 or older, demonstrated through reliable audience-composition data. Organic posts on Instagram, Facebook, and TikTok with platform age-gating fall on the permitted side; paid placements on those platforms are largely off-limits, and Google search ads for cannabis are prohibited at the platform level. Specialty cannabis platforms (Leafly, Weedmaps) comply; billboards are prohibited within 1,000 feet of schools, parks, and youth-oriented areas under BPC 26152.
• What is a limited-access area? Under CCR § 15042, the retail floor (after the entry ID check) and the back-of-house storage area are limited-access areas. Only authorized employees, ID-verified customers, and authorized visitors may enter; visitor logs and employee badging are mandatory. Customers cannot enter the back-of-house storage area, and after-hours, no cannabis goods may be displayed on the retail floor — vault storage is required overnight. A common inspection finding is customer access to back-of-house during busy periods.

Operators routinely underestimate the all-in cost of a California retail license by 50–70%. State fees are a small share. What gets people is local permit fees, CEQA coordination, the tenant-improvement and security build, the SB 540 brochure flow, the POS rule-set engineering, specialist consultants, and the carrying cost during the 6–14 month approval window before the first sale.

When we engage, you know exactly which sub-areas of the retail packet and the operational stack we are responsible for and which remain with your internal team or other vendors. Clear lines prevent dropped balls — and they make the engagement defensible to a buyer's diligence team two years later.

Escalation path

When the matter crosses into counsel territory, we coordinate with your retained counsel on a single record rather than running a parallel track. Triggers include: equity dispute among Owners, undisclosed interest discovered late, an SB 1186 medical-delivery preemption dispute with a city, a Notice to Comply or Order to Show Cause already issued, an underage-decoy sting failure or a sale-to-minor finding, a regulatory-investigation interview request, or any matter requiring formal legal advice or representation before an administrative law judge. Where you do not yet have retained counsel and the matter requires one, we make the introduction; we do not act as counsel.

How we draw the boundary with you

You own the business decisions: capital structure, build-out scope, brand selection, product mix, hiring, pricing, lease economics, and signatures. We own the regulatory packet around those decisions: every form, every disclosure, every diagram, the POS rule set, the SOPs, the surveillance plan, the SB 540 brochure flow, and the deficiency-response cycle. The boundary is documented in the engagement letter line-by-line and confirmed on the kickoff call. When a question arises mid-engagement that crosses the line, the coordinator flags it the same day rather than absorbing it silently.

What is explicitly out of scope

Out of scope: real-estate transactions and lease negotiation (referred to a real-estate broker or counsel familiar with cannabis-specific lease provisions including federal-forfeiture and change-of-control clauses), capital raises and investor solicitation (referred to your placement agent or counsel), any matter requiring a member of the State Bar to sign, the local-jurisdiction permit process itself (handled under our Local Permit Authorization service), CEQA document drafting where the local lead agency requires its own consultant, M&A diligence and structuring (handled under our Strategic Expansion service), CDTFA tax filings and 280E structuring (handled under our Financial & Tax Advisory service — note the April 22, 2026 DOJ Schedule III rescheduling for state-licensed medicinal cannabis where it touches the medical retail channel), and any matter that would conflict with our engagement's named scope.

When DCC asks why we recommended something, we cite the regulation. When an inspector asks what a procedure is based on, we cite the CCR section, the BPC subsection, or the SB or AB number. The specificity is the difference between advice and defensible compliance work — and it is what survives a deficiency response, an unannounced inspection, an underage-decoy sting, an ownership change, and a buyer's diligence three years later.

The retail packet and the operating floor are governed by four overlapping authorities: the Business & Professions Code (MAUCRSA, 2017, plus the topical bills), CCR Title 4 Division 19 (DCC's operational regulations for retail and delivery), the Public Resources Code (CEQA review for annual licensure), and the local cannabis ordinance for the jurisdiction (which sets the BPC 26055(a) authorization and may set narrower hours and the local cannabis business tax). Federal-adjacent authorities — Cal-OSHA, CDTFA for the AB 564 excise and sales tax, EDD, DOJ for LiveScan — sit alongside, with the April 22, 2026 DOJ Schedule III rescheduling of state-licensed medicinal cannabis touching the medical retail channel.

Business & Professions Code (statute)

• BPC 26050 — License classifications. Defines Type 9 non-storefront and Type 10 storefront retail (and Type 12 microbusiness). Picking the wrong classification is a re-application, not an amendment.
• BPC 26051.5 — Application requirements. The statutory list of what must be submitted: applicant info, premises description, ownership disclosure, fingerprints, financial-interest disclosures, and operating procedures.
• BPC 26055 — Local authorization. DCC may not issue any license without evidence of local authorization at the proposed premises. The single most common reason retail applications stall.
• BPC 26057 — Grounds for denial. Failure to comply with BPC Division 10, failure to satisfy CEQA, prior license revocation, and material misrepresentation are the named denial grounds.
• BPC 26140 — Sales to minors. A single sale to a minor is an immediate suspension trigger and a likely revocation at hearing.
• BPC 26152 — Advertising restrictions. Prohibits billboard advertising within 1,000 feet of schools, parks, and youth-oriented areas, and bars advertising directed at minors.

California Code of Regulations Title 4 Division 19 (DCC operational rules)

• CCR 15002 — Application content and deficiency window. The umbrella section covering what every application must contain. Includes the criminal-history narrative under 15002(c) and the 10-business-day deficiency response window under 15002(d).
• CCR 15003–15004 — Owners and Financial Interest Holders. Defines who must be disclosed as an Owner (≥20% interest, officers, directors, anyone with control) versus a Financial Interest Holder.
• CCR 15006 — Premises diagram. Sets the scale, labeling, and content standards. Must show limited-access areas, camera fields of view, POS zones, and product flow.
• CCR 15007 — Legal right to occupy. Lease, deed, or owner consent must be on file. Form 9206 landowner consent supports this when cannabis use is not already authorized in the lease.
• CCR 15010 — CEQA evidence. Annual licensees must submit a Notice of Exemption, MND, or final EIR — typically issued by the local lead agency.
• CCR 15014 — Fees and surety bond. Fee schedule scaled by license type and revenue tier; $5,000-minimum surety bond per premises (Form 8113) payable to the State of California.
• CCR 15042 — Limited-access areas. Back-of-house and the retail floor (after entry ID check) are limited-access; only authorized employees, ID-verified customers, and authorized visitors.
• CCR 15044–15047 — Surveillance. 24/7 camera coverage at minimum 1280×720 resolution and 15 fps, 90-day retention, coverage of every limited-access area, entrance, exit, POS station, vault, and parking.
• CCR 15048 — Waste management. Cannabis waste must be rendered unusable and unrecognizable, logged in METRC, and routed through a licensed hauler or self-hauled to an authorized facility.
• CCR 15400–15418 — Retail operations. Hours of 6:00 AM to 10:00 PM (or stricter local), age and ID verification, retail floor and limited-access rules, packaging and labeling check at point of sale, and the prohibition on cannabis products attractive to children.
• CCR 15409 — Daily purchase limits. 28.5 grams of non-concentrate cannabis, 8 grams of concentrate (including the cannabinoid content of edibles), and 6 immature plants per adult-use customer per day; 8 ounces or higher per physician recommendation for medicinal patients plus 12 immature plants.
• CCR 15600–15633 — Delivery. Vehicle requirements (GPS, locked container, manifest), driver requirements (employee 21+, LiveScan), order procedure, in-transit rules, ID verification at the door, and the back-by-10-PM constraint.

DCC forms (the operational documents)

• Form 9101 — Commercial Cannabis Owner Submittal. One per Owner at the ≥20% CCR 15003 threshold. Includes the criminal-history narrative, percentage of ownership, and LiveScan acknowledgement.
• Form DCC-LIC-019 — Consolidated Standard Operating Procedures. The single SOP package replacing the legacy Forms 015–020 in February 2022.
• Form 9205 — Labor Peace Agreement Notarized Statement. Required at 10 employees or more (lowered from 20 in July 2024). Either the notarized attestation to enter into an LPA or the executed signature page.
• Form 9206 — Landowner Approval Consent. Landlord's written consent to the cannabis use, supporting the CCR 15007 evidence of legal right to occupy.
• Form 8113 — Commercial Cannabis Licensee Bond. Surety bond ≥$5,000 per premises, naming the State of California as obligee. Issued by a CA-licensed surety; expires annually with the license.
• Form DCC-LIC-027 — Notifications and Modifications. The post-issuance form for premises changes, ownership changes, DRP changes, and license-type modifications. Some changes require prior approval; some are notification-only.
• Form DCC-LIC-017 — Corrective Action Plan. Submitted after a Notice to Comply or other finding requiring remediation.

Topical bills affecting retail

• SB 540 — Retailer brochure (effective March 1, 2025). Display the DCC-mandated consumer-information brochure at every point of sale and offer each new consumer a copy. Applies in-person and online at time of online purchases.
• AB 564 — 15% excise rate (Oct 1, 2025 through June 30, 2028). Sets the cannabis excise tax at 15% of gross retail receipts, replacing the briefly-applied 19% rate that ran July 1 through September 30, 2025. Default reverts to a formula-based rate after sunset unless extended.
• SB 1186 — Medicinal Cannabis Patients' Right of Access Act. Preempts local bans on medicinal cannabis delivery; the doctrine is contested in some cities, so verify currency with counsel before relying on the preemption.
• AB 1894 — Vape labeling (where retail touches vape inventory). Sets vape-specific labeling rules.

How the authorities interact

Local ordinance and BPC 26055 form the gatekeeper layer — without local authorization, no DCC review proceeds and the more-restrictive local hours, density caps, and local cannabis business tax apply on the floor. CCR Title 4 Division 19 then governs the operational packet and the day-to-day operation, with each DCC form (9101, 8113, 9205, 9206, DCC-LIC-019) attached to a specific CCR section it satisfies. The topical bills (SB 540 brochure, AB 564 excise, SB 1186 medical-delivery preemption) sit on top of the CCR baseline and have their own effective dates that the POS rule set, the SOPs, and the brochure flow must track. CEQA under Public Resources Code 21000 et seq. sits alongside, evidenced through CCR 15010, and is the long pole on annual conversions and on the equity-retailer provisional renewal pathway running through January 1, 2031. The April 22, 2026 DOJ Schedule III rescheduling of state-licensed medicinal cannabis affects federal tax treatment of medicinal sales (handled under our Financial & Tax Advisory service); adult-use treatment is unchanged pending the June 29, 2026 DEA hearing on broader rescheduling. If any one layer falls out of sync — local approval lapses, surveillance plan misses 90-day retention, brochure drops out of the online checkout, ownership changes after submission without a Form DCC-LIC-027 — the operation moves backward.

Deliverables are what we produce. Outcomes are what those deliverables enable — the specific operational results that follow from the work being done right the first time. Below are the ten outcomes our retail engagement is designed to produce.

Ten outcomes, in detail

• Complete DCC retail application across the right portal. Type 9 non-storefront delivery, Type 10 storefront, or Type 12 with retail activity, filed through the CLEaR portal. The wrong portal means re-application, not amendment.
• SOPs that survive an actual inspection. Form DCC-LIC-019 written to your floor plan, your POS, your staffing, and your product mix — not a template. Inspectors who request SOPs and find generic templates issue Notices to Comply at minimum; SOPs written to the operation hold up under scrutiny and survive Form DCC-LIC-027 modifications without rewriting.
• Premises diagram that matches the building. CCR 15006 scale and labeling, every limited-access area, POS zone, vault location, and camera field of view shown on the same drawing, ready to compare against the physical site at the CCR 15011 pre-licensure inspection.
• Surveillance plan that passes the camera-by-camera audit. CCR 15044–15047 satisfied: 1280×720 minimum at 15 fps, 24/7 recording, 90-day retention, every limited-access area, entrance, exit, POS station, vault, and parking covered.
• POS rule set that enforces every line. Configured against CCR 15409 (28.5g flower, 8g concentrate, 6 immature plants adult-use; medicinal per physician recommendation) and aggregated across same-day visits. Age-gates checkout against scanned ID. Stacks the AB 564 15% excise plus state and local sales tax (medicinal exemption applied for state-ID-card holders) plus local cannabis business tax correctly on every receipt. Tested with synthetic transactions before any real sale.
• SB 540 brochure displayed and offered, in-person and online. Physical brochures stocked at every POS station, the online-checkout flow built so the brochure is presented at time of purchase rather than buried in the footer, and a first-time-customer flag in the customer record so each new consumer is offered a copy. The most-cited new rule in 2025 — closed at the source.
• Ownership and FIH disclosure that survives diligence. Every Owner under CCR 15003 disclosed via Form 9101 with LiveScan completed; every Financial Interest Holder under CCR 15004 documented including profit-share landlords and revenue-share consultants.
• LPA and bond aligned to current threshold. Form 9205 LPA attestation handled correctly for the July 2024 threshold change (10 employees, lowered from 20), Form 8113 surety bond at $5,000 minimum per premises payable to the State of California.
• Delivery operations built to CCR §§ 15600–15633. For Type 9 or Type 10 with delivery: GPS-tracked employee-driven vehicles, locked container, METRC delivery manifest in transit, ID and signature recorded at the door, no porch drop-off, dispatch software enforcing the back-by-10-PM constraint on the round trip, and an SB 1186 medical-delivery posture verified with counsel where the route reaches into delivery-prohibited cities.
• Pre-licensure inspection ready, METRC onboarded, calendar handed off. Premises staged to match the diagram, METRC activation scheduled with tag-activation timing through the state-administered Franwell portal, CDTFA seller's-permit verified, Cal-OSHA 30-hour course committed, and a 60-day post-licensure compliance calendar in your hands on day one. Open-doors day arrives with zero outstanding deficiencies.

How we measure

Outcomes are measured at three checkpoints: completeness on submission (the DCC retail application checklist scored 100% before filing), velocity through review (deficiency notices logged and resolved inside the CCR 15002(d) ten-business-day window without exception), and operational readiness on issuance (the 60-day post-licensure calendar populated with named owners and dated milestones — METRC activation, CDTFA registration, AB 564 excise stack live, SB 540 brochure flow live, Cal-OSHA training scheduled — before the license arrives in the portal). Every measurement is on the record so a buyer's diligence two years later sees the work, not just the result.

Post-engagement review

30 days after open-doors day, we run a 60-minute post-engagement review covering the SOP package in production, the POS rule-set behavior against the first 30 days of real transactions (daily-limit aggregation, age-gate refusals, tax-stack accuracy on receipts), surveillance retention rolling forward, the SB 540 brochure distribution log, the Form DCC-LIC-027 modifications already on the calendar, and the upcoming renewal window 60 days before expiration. Where the engagement continues into the Ongoing Compliance Retainer, this becomes the kickoff for the steady-state cadence; where it does not, the calendar and document vault transfer to your team with a one-page handoff brief.