When the notice lands.
You call us first.

When a written response goes to DCC, every rebuttal cites the CCR subsection at issue. When a Notice of Defense is filed under Government Code 11506, the procedural posture is preserved by statute, not by narrative. When the CAPA goes in on Form DCC-LIC-017, each corrective action is tied to the regulation it remediates and to the BPC 26031(b) mitigation factor it documents. Nothing opinion-based, nothing inferred — the line in the filing matches the line in the rule.

Enforcement defense in California cannabis operates at the junction of four bodies of authority: the Business & Professions Code Division 10 (substantive cannabis law and DCC enforcement powers), the California Code of Regulations Title 4 Division 19 (operational and disclosure rules), the Administrative Procedure Act in Government Code 11340 et seq. (Accusation, hearing, and final-decision framework), and the California Evidence Code (admissibility at OAH). The DCC Disciplinary Guidelines (September 2021, amended July 2022) sit alongside as the agency’s published penalty matrix and the playbook every defense filing reverse-engineers. Each authority carries its own deadlines and its own procedural traps. We track all four simultaneously.

Business & Professions Code (statute)

• BPC 26031. Primary enforcement statute — DCC authority to issue Notices to Comply, Notices of Violation, citations, and administrative fines up to $5,000 per violation per day on licensees and up to $30,000 per violation per day for unlicensed activity. BPC 26031(b) sets the seven-factor analysis (nature and seriousness, persistence, timing of corrective action, prior compliance history, good faith, culpability, other matters justice may require) that governs every fine mitigation argument.
• BPC 26031.5. Formal Accusation framework for license suspension and revocation through the Office of Administrative Hearings. The DCC’s charging document for any proceeding seeking license discipline is filed under this section, triggering the Government Code 11506 fifteen-calendar-day Notice of Defense window.
• BPC 26031.7. Interim Suspension Order authority — immediate suspension where the DCC determines an imminent threat to public health or safety, with the licensee’s right to a hearing before OAH within fifteen business days. The single most aggressive enforcement tool in the DCC’s book.
• BPC 26038. Unlicensed-activity enforcement and civil penalty provisions, with the per-day ceiling at $30,000 for activity outside the license scope or before issuance — six times the licensed-operator rate.
• BPC 26057. Grounds for application denial and the prior-revocation disclosure obligation on every future license application, plus the minimum one-year lockout following revocation. The provision that turns a single revocation into a multi-year statewide bar.
• BPC 26013. Embargo and product-hold authority — the DCC issued 481 product embargoes in 2024 alone, plus 63 recalls affecting roughly 25,000 retail units. Product under embargo cannot be moved, transferred, sold, or destroyed without written DCC release.

California Code of Regulations Title 4 Division 19 (DCC operational rules)

• CCR 15002(d). Standard ten-business-day response window for DCC written communications including deficiency notices and most Notices to Comply. Missing the window forfeits procedural defenses and accelerates escalation under BPC 26031.5.
• CCR 15020. Annual renewal framework. Open enforcement matters and unpaid administrative fines on record block renewal under CCR 15020 and convert into a denial under BPC 26057 if not closed before the renewal window opens.
• CCR 15037. Seven-year recordkeeping retention requirement covering SOPs, training records, METRC exports, surveillance, vendor COAs, and every document the CAPA package will need to draw on. The deeper this archive runs, the stronger the BPC 26031(b) good-faith and prior-compliance-history record at mitigation.
• CCR 15042. Limited-access area rules — only employees, logged vendors, logged outside professionals, and DCC inspectors may enter areas where cannabis is present. Limited-access violations are a frequent inspection finding and a common Notice-to-Comply trigger.
• CCR 15044–15047. Surveillance specifications: 24/7 recording at minimum 1280×720 resolution, 90-day retention, full coverage of every limited-access area, point of sale, entrance, exit, and loading zone. Surveillance gaps account for a disproportionate share of citation matters.
• CCR 16400–16410. License-type-specific operational requirements (cultivation tier rules, manufacturing process controls, distribution chain-of-custody, retail purchase limits) commonly cited in enforcement matters as the substantive standard the licensee allegedly breached.

DCC forms and authorities

• DCC Disciplinary Guidelines (Sept 2021, amended July 2022). The agency’s published penalty matrix categorizing violations by severity, mapping the BPC 26031(b) factor analysis to recommended fine ranges, and defining when a Notice to Comply escalates to a citation, a citation to an Accusation, and an Accusation to a revocation. The same document is the offense playbook and the defense playbook.
• Form DCC-LIC-017 — Corrective Action Plan. The DCC’s standard CAPA filing form. Required after a Notice to Comply or compliance finding requiring remediation; the plan becomes a regulatory commitment and failure to execute it is a more serious violation than the original finding. Format and evidentiary attachments are decisive on first review.
• Form DCC-LIC-019 — Consolidated SOPs. The on-file SOP package the DCC will request immediately on any inspection or enforcement matter. Disconnects between the written SOP and the actual practice are violations regardless of whether the actual practice is reasonable.
• DCC compliance-action record. The DCC’s live public record of Accusations, stipulations, and final decisions. Every defense scrub runs against this record so the licensee’s posture is benchmarked to comparable matters before negotiation opens.

Administrative Procedure Act and judicial review

• Government Code 11500 et seq. Administrative Procedure Act governing OAH proceedings, hearing rights, exhibit submission, witness procedure, and the agency’s adoption, rejection, or modification of the Administrative Law Judge’s Proposed Decision.
• Government Code 11506. Notice of Defense requirement — fifteen calendar days from Accusation service to preserve hearing rights. Default on this deadline triggers the agency’s requested sanctions in full, typically full revocation. The single most consequential clock in cannabis enforcement defense.
• Code of Civil Procedure 1094.5. Petition for writ of administrative mandamus — superior court review of adverse OAH final decisions. The filing window is short and the record is closed at the agency level, so the OAH evidentiary record is what wins or loses on writ.
• OAH Rules of Practice and California Evidence Code. Procedural rules governing hearing conduct, subpoena practice, exhibits, pre-hearing motions, hearsay exceptions, and expert testimony admissibility at OAH. Exhibits not built to Evidence Code standards are excluded; preparation matters more than oratory.

How the authorities interact

The DCC Disciplinary Guidelines sit on top of BPC 26031 and BPC 26031.5 as the agency’s playbook for which violations get a Notice to Comply, which escalate to a citation, and which trigger an Accusation seeking suspension or revocation. Form DCC-LIC-017 is the document that closes a Notice to Comply before it escalates — tied to specific CCR sections (15002, 15042, 15044, 15048, the 16400 series), formatted to the BPC 26031(b) factor analysis, and supported by CCR 15037 records. If the licensee misses the CCR 15002(d) ten-business-day window or files a non-evidentiary CAPA, the matter migrates onto the BPC 26031.5 track, the Government Code 11506 fifteen-day Notice of Defense clock starts, and the proceeding lands at OAH under Government Code 11500 et seq. Adverse OAH decisions are reviewed by superior court under CCP 1094.5, where the OAH evidentiary record is the entire record. Every layer compounds: a clean CCR 15037 archive supports a strong BPC 26031(b) mitigation, a strong mitigation produces a stipulated decision, a stipulated decision keeps the matter off the BPC 26057 future-application disclosure record. The defense’s job is to keep the matter at the lowest tier of this stack — ideally closed at the Notice to Comply level on Form DCC-LIC-017 inside the ten-business-day window.

Most compliance engagements feel opaque because firms guard their process. We're the opposite — here's exactly what we do, in order, and when you'll see each deliverable.

The playbook

• 24-Hour Emergency Assessment. From the moment you forward the DCC document to our intake line, we start the clock. Within 24 hours we confirm receipt, identify every cited BPC and CCR section, classify violation severity (Level I administrative through Level III public-safety), calculate maximum fine exposure under BPC 26031, map every statutory deadline (CCR 15002(d) ten-business-day Notice to Comply window, Government Code 11506 fifteen-calendar-day Notice of Defense window for Accusations, immediate embargo compliance under BPC 26013, BPC 26031.7 fifteen-business-day Interim Suspension hearing right), and deliver a written case assessment with recommended defense posture and maximum fine exposure quantified under BPC 26031(a) and the DCC Disciplinary Guidelines.
• Response Strategy & Legal Coordination. We draft the written response strategy matched to the enforcement level. For NTCs we build a corrective action letter tied to each CCR subsection. For citations we assemble a mitigation memorandum applying the BPC 26031(b) factor analysis. For formal accusations we coordinate with cannabis counsel, file the Notice of Defense within the 15-day APA window, and preserve every procedural defense. No deadline is ever missed.
• Documentation & CAPA Drafting. We assemble the evidentiary file: pre-violation SOPs, training logs, METRC audit trails, vendor COAs, security system records, and prior compliance inspection reports showing good-faith operation. We draft the CAPA plan on Form DCC-LIC-017 with root cause analysis, corrective actions tied to specific CCR sections, preventive controls, responsible personnel by name and title, completion deadlines, and supporting exhibits. The finished CAPA package is formatted to DCC enforcement staff review preferences and to the BPC 26031(b) seven-factor framework so it passes on first review and avoids the revision cycles that consume deadline time and erode credibility with enforcement staff.
• Facility Remediation & Evidence Capture. We supervise on-site remediation at your facility: revised SOPs deployed, staff retrained with documented sign-off, METRC discrepancies cleared with supporting adjustments, security systems repaired with vendor invoices and RMA numbers, product holds placed on any non-compliant SKUs, and every corrective step photographed with GPS and timestamp metadata. The evidence package is built to survive subpoena and cross-examination if the matter escalates to OAH.
• Negotiation & Settlement Management. We engage DCC enforcement staff directly: submit the corrective action filing, negotiate administrative fine reductions against statutory mitigation factors, propose compliance stipulations or settlement agreements for matters headed to accusation, and coordinate re-inspection scheduling with DCC field officers. In roughly 90 percent of matters, this phase ends the case before any hearing is required. The goal is a closure letter and an unimpaired license.
• Hearing Representation & Resolution. If the matter cannot be resolved through negotiation and proceeds to the Office of Administrative Hearings, we prepare the full defense package in coordination with counsel: witness lists and witness preparation under Government Code 11500 et seq., exhibit indexes built to the California Evidence Code, subpoenas, pre-hearing motions, direct and cross-examination outlines, and the post-hearing brief that frames the Administrative Law Judge’s Proposed Decision. We also prepare post-resolution reinstatement packages for licensees coming off probation or suspension so the return to full operation closes the matter completely — reinstatement petition under the underlying decision’s terms, BPC 26057 disclosure narrative for any future application, and a one-year compliance audit cadence to harden the SOP that produced the original finding.

Duration and rhythm

Hour 0 to Hour 72 is the emergency phase — intake, document preservation, response strategy, counsel coordination, formal response drafting. Day 5 through Day 30 is the CAPA construction and negotiation phase — evidentiary file built, on-site remediation supervised under photographic and GPS-tagged capture, written response and Form DCC-LIC-017 Corrective Action Plan filed inside the CCR 15002(d) ten-business-day window. Day 30 through Day 90 is the resolution phase — DCC enforcement-staff negotiation, stipulation drafting, re-inspection coordination, closure-letter pursuit. Where the matter escalates to a formal Accusation under BPC 26031.5 or an Order to Show Cause, the OAH timeline runs six to eighteen months from the Notice of Defense filing through Proposed Decision; CCP 1094.5 writ review adds another six to twelve months at superior court.

Who you work with each phase

One named defense coordinator owns the engagement from intake through closure — the same principal on the 30-minute intake call, the same name on every status update, the same signature on every filing draft you review. Specialist contributors come in at the milestones the matter demands: a CAPA drafter at Day 5 to Day 14 building the BPC 26031(b) factor-analysis record, a METRC reconciliation specialist where the cited violations involve track-and-trace gaps, a security-systems consultant where surveillance under CCR 15044–15047 is at issue, a Cal-OSHA liaison where employee safety is in the citation. Where the matter requires licensed counsel — OAH appearance, writ petition, federal agency interaction — we integrate cannabis defense counsel inside 24 hours, either from your existing firm or from our retained network, and continue the compliance, evidentiary, and CAPA work under counsel direction so the defense file stays privileged.

• What is a DCC Notice to Comply and how long do I have to respond?. A Notice to Comply (NTC) is the DCC's first-level enforcement action under BPC 26031, with the standard response window set by CCR 15002(d) at ten business days from service. It identifies specific regulatory violations, cites the exact CCR subsection breached, and requires documented corrective action on Form DCC-LIC-017 within the stated deadline. Critical public-safety violations under BPC 26031.7 trigger an Interim Suspension Order with immediate corrective action and a hearing right within fifteen business days. Missing the deadline escalates the matter to a formal citation under BPC 26031, then to a formal Accusation under BPC 26031.5, and puts the violation on the DCC’s public compliance-action record where it is disclosable on every future application under BPC 26057.
• What triggers a DCC Notice to Comply?. The most common triggers are: METRC track-and-trace discrepancies (missing transfers, unsealed manifests, unreported losses), failed DCC or local inspections, security system failures (camera downtime, access control breaches, alarm response gaps), unauthorized premises modifications not submitted under CCR 15027 (typically via Form DCC-LIC-027), operations outside the scope of the license type, packaging and labeling deficiencies under CCR Sections 17406 and 15411, retail transaction limit violations, employee badge and training documentation gaps, and complaints referred from the public, local jurisdictions, or other state agencies including CDTFA, CDPH, and CDFA.
• How much are DCC administrative fines and how are they calculated?. Under BPC 26031(a), DCC administrative fines reach $5,000 per violation, per day that the violation continues for licensees, and $30,000 per violation, per day for unlicensed activity under BPC 26038. The DCC calculates fine amounts using the seven-factor analysis in BPC 26031(b): (1) nature and seriousness of the violation, (2) persistence of violation, (3) timing of corrective action, (4) prior compliance history, (5) good faith, (6) degree of culpability, and (7) any other matter justice may require. A single inspection can generate multi-count fine assessments reaching six figures when violations are characterized as ongoing — a 30-day surveillance gap counted as 30 separate violations at $5,000 each is $150,000 before the BPC 26031(b) record is built. Our defense documents each mitigating factor against the specific line items in the citation, with exhibits keyed to CCR 15037 records.
• What is the difference between a Notice to Comply, a Notice of Violation, and a Citation?. A Notice to Comply (NTC) is a non-monetary first-level correction demand — fix the issue and the matter closes. A Notice of Violation (NOV) is a formal finding that a violation occurred and is typically issued when an NTC is not timely cured; it triggers fine assessment and appears on the licensee's record. A Citation is the DCC's formal fine imposition document issued under BPC 26031; it states the fine amount, cites the regulations breached, and offers the licensee an appeal right to the DCC's Compliance and Enforcement Branch. Each document carries a different response deadline and strategic posture.
• Can the DCC suspend my license without a hearing?. Yes, in narrow circumstances. Under BPC 26031.7, the DCC can issue an Interim Suspension Order (ISO) without a prior hearing when there is an imminent threat to public health or safety — typical triggers include adulterated product in distribution, child-appeal packaging, unlicensed activity at the premises, or safety incidents at the facility. An ISO takes effect immediately on service. The licensee is entitled to a hearing before the Office of Administrative Hearings within 15 business days to challenge the suspension. For non-emergency suspensions, the DCC must file a formal Accusation and proceed through the full Administrative Procedure Act process.
• What is a formal Accusation and what is the response deadline?. A formal Accusation is the charging document the DCC files under BPC 26031.5 when seeking license suspension, revocation, or significant fines through the Office of Administrative Hearings. Under Government Code Section 11506 (part of the Administrative Procedure Act), the licensee has 15 calendar days from service of the Accusation to file a Notice of Defense demanding a hearing. Missing the 15-day window results in a default decision adopting the DCC's requested sanctions in full — typically full license revocation. We draft and file the Notice of Defense within days of intake to preserve every procedural right.
• What happens at an Office of Administrative Hearings proceeding?. The Office of Administrative Hearings (OAH) is a state agency of Administrative Law Judges (ALJs) who preside over DCC enforcement matters. Hearings are adversarial evidentiary proceedings where the DCC is represented by Deputy Attorneys General from the California Department of Justice. The DCC carries the burden of proof by preponderance of the evidence. Both parties present witnesses, exhibits, expert testimony, and briefs. The ALJ issues a Proposed Decision which the DCC then adopts, rejects, or modifies. Final decisions can be challenged by petition for writ of administrative mandamus under Code of Civil Procedure 1094.5.
• Do I need a cannabis attorney, or is your compliance team enough?. For Notices to Comply, Notices of Violation, and most citations, our compliance defense team handles the matter end-to-end — we draft responses, build CAPA plans, negotiate with enforcement staff, and file closure documentation. For formal Accusations, Interim Suspension Orders, and any matter proceeding to the Office of Administrative Hearings, we coordinate with experienced cannabis attorneys because those forums require licensed counsel. We maintain working relationships with cannabis defense attorneys and can integrate counsel into an existing engagement within 24 hours.
• What is a CAPA plan and why does it matter?. A Corrective and Preventive Action (CAPA) plan is the documented response on Form DCC-LIC-017 showing the DCC exactly what you did to fix each cited violation and what controls are in place to prevent recurrence. A compliant CAPA plan includes root cause analysis for each finding, specific corrective actions tied to CCR subsections, assigned personnel with names and titles, completion deadlines, preventive controls with measurable indicators, and evidentiary exhibits — timestamped photographs with GPS metadata, revised SOPs with version control under Form DCC-LIC-019, training records under CCR 15037, vendor certifications, and METRC reconciliation spreadsheets. A well-drafted CAPA plan is the single most decisive document in enforcement closures — roughly 90 percent of our matters close at the Notice to Comply or citation stage on a Form DCC-LIC-017 filing that DCC accepts on first review.
• How are administrative fines reduced or eliminated?. Fine reduction flows from the BPC 26031(b) mitigation factor analysis. We document good-faith compliance history (prior clean inspections, proactive disclosures), immediate and substantial corrective action (evidence of fixes implemented before the response deadline), low culpability (system failures, vendor errors, employee deviation from trained procedures), low gravity of harm (no public-safety impact, no diversion), and absence of prior violations. We also negotiate compliance stipulations that convert a proposed revocation into a stayed suspension with probationary terms, preserving the license.
• Can the DCC embargo or seize my cannabis inventory?. Yes. Under BPC 26013 and BPC 26031, the DCC can issue an embargo order (also called a hold order) requiring the licensee to quarantine specific lots or batches pending investigation. Common embargo triggers include adulterated product, failed laboratory testing, unlicensed source material, or METRC chain-of-custody gaps. Product under embargo cannot be moved, transferred, sold, or destroyed without DCC authorization. We defend against embargoes by providing certificates of analysis, METRC transfer manifests, chain-of-custody documentation, and vendor verification records. Improperly maintained embargoes have been lifted within 48 hours of our engagement.
• What is an Order to Show Cause and what should I do if I receive one?. An Order to Show Cause (OSC) is a formal DCC document requiring the licensee to appear — in writing or in person — and show cause why a specific adverse action (suspension, revocation, fine, condition) should not be imposed. OSCs typically carry a 10 to 30 day response deadline. The written response must address each factual and legal allegation, attach supporting evidence, and present the mitigating circumstances. Default on an OSC frequently results in the sanction being imposed as proposed. We draft OSC responses that include sworn declarations, compliance exhibits, and proposed alternative resolutions such as monitored compliance.
• Can I continue operating while an enforcement matter is pending?. For Notices to Comply, Notices of Violation, citations, and pending Accusations the licensee continues normal operations. Operations cease only when the DCC issues an Interim Suspension Order under BPC 26031.7, a full suspension takes effect after Accusation resolution, or an embargo under BPC 26013 applies to specific inventory. Even in formal Accusation proceedings, licensees operate throughout the 6 to 18 month OAH timeline from Notice of Defense filing to Proposed Decision under Government Code 11500 et seq. Our job is to prevent operational interruption — which typically means resolving the matter at the Notice to Comply or citation stage on a Form DCC-LIC-017 filing inside the CCR 15002(d) ten-business-day window before escalation paths open.
• How does license reinstatement work after a suspension?. Reinstatement depends on the terms of the underlying decision. For stayed suspensions with probation, the licensee operates under monitored conditions for a defined term (commonly 12 to 36 months) with specified compliance audits and reporting; on successful completion the license returns to unrestricted status. For actual suspensions, the licensee applies for reinstatement at the end of the suspension term by filing a reinstatement petition demonstrating full compliance, payment of all outstanding fines, and completion of any required corrective actions. Revoked licenses are barred from re-application for at least one year under BPC 26057 before any new application, and the prior revocation becomes a disclosable fact on all future license applications statewide.
• How quickly can GreenState start working on my enforcement matter?. Immediately. Our emergency intake line operates 24/7. Once the DCC document is forwarded, we acknowledge within one hour, complete the initial severity triage within 24 hours, and deliver the written case assessment within 48 hours. The written response to the DCC is drafted and filed before the deadline in every engagement — our internal rule is that every filing is finalized with 48 hours to spare against the stated deadline. Engagement letters are signed the same day and work begins immediately on signature.

Enforcement defense work breaks cleanly into six operational areas — each a named responsibility with its own statutory deadline, its own filing format, and its own escalation path. Where we own, we draft the filings, assemble the evidentiary record, negotiate with DCC enforcement staff, and sit at the table through resolution. Where the work crosses into privileged legal advocacy, we coordinate with counsel. The engagement letter draws this line before intake closes.

Deliverables are what we produce. Outcomes are what those deliverables enable — the specific operational benefits you get from having this work done right. Enforcement defense outcomes are measured in preserved licenses, reduced fines, and operational continuity through the response period.

• 24-hour emergency activation from any DCC Notice, citation, accusation, embargo order, or Order to Show Cause — principal on the phone inside 30 minutes during business hours, two hours after-hours.
• Notice to Comply analysis with line-by-line CCR citation mapping and severity triage under BPC 26031, delivered within 24 hours of intake with maximum fine exposure quantified.
• Citation defense and administrative fine mitigation — DCC fines reach $5,000 per violation, per day under BPC 26031(a); typical negotiated reductions run 60–90 percent when the BPC 26031(b) mitigation record is built correctly.
• Formal accusation defense and OAH representation preparation under BPC 26031.5, including the Notice of Defense filed within the 15-day Government Code 11506 window to preserve hearing rights.
• Corrective and Preventive Action plan drafting with timestamped, photographed, and GPS-tagged evidence, formatted to DCC enforcement staff review preferences so the CAPA passes first review.
• Emergency license suspension defense for imminent public-health-and-safety allegations under BPC 26031.7, including expedited-hearing motions and stay applications.
• METRC track-and-trace reconciliation and cleanup for discrepancy-based enforcement actions — UID tag audit, transfer manifest reconciliation, package lifecycle traceability evidence.
• Re-inspection coordination with DCC field staff and local licensing authorities (fire marshal, health department, building department) until the closure letter issues.
• Compliance stipulation and settlement agreement negotiation to avoid suspension or revocation outcomes — the preferred resolution path for matters where the evidentiary record doesn’t support full dismissal.
• Written compliance history narrative documenting good-faith effort, prior corrective action records, and remediation posture — the primary mitigation exhibit in any fine reduction negotiation.
• Attorney coordination for accusations, OAH hearings, judicial review petitions under CCP 1094.5, and writ proceedings — counsel integration within 24 hours where the matter requires licensed advocacy.
• Post-resolution reinstatement package preparation for licensees recovering from suspension or probation terms, including the reinstatement petition and compliance-verification exhibits required under the underlying decision.

How we measure

Outcomes are measured at three checkpoints. First, response timeliness — every filing submitted inside the statutory window with a documented 48-hour cushion against the deadline on the face of the notice (CCR 15002(d) ten business days, BPC 26031.7 immediate, Government Code 11506 fifteen calendar days from Accusation service). Second, fine reduction against the BPC 26031(b) factor analysis — we record the proposed fine on intake and the final fine on closure, and target a 60 to 90 percent reduction across the engagement portfolio. Third, license preservation — the pass/fail metric. Every on-time engagement since 2022 has closed with the license unimpaired, no suspension imposed, no revocation entered. The DCC compliance-action record is the public ledger that confirms it.

Post-engagement review

30 days after the closure letter issues, we run a 60-minute post-engagement review covering the underlying root cause, the rewritten SOP and where it now lives in your document vault, the training cycle that closes the loop on the cited violation, the operational controls installed to prevent recurrence, and the compliance calendar through the next renewal window. The CAPA file, the closure letter, the DCC compliance-action record entry, and the post-resolution reinstatement package (where applicable) are archived to your secure vault under a 7-year retention plan aligned to CCR 15037 so a future renewal review, ownership change, or buyer’s diligence finds the complete story. Where the engagement continues into our Ongoing Compliance Retainer, this becomes the kickoff for the steady-state cadence; where it does not, the file transfers with a one-page handoff brief.