Every label reviewed.
Every claim, defensible.

Product and label compliance breaks cleanly into four operational areas. These are our named responsibilities — not review passes, not advisory feedback, not “we’ll flag anything that looks off” meetings. Where we own, we red-line, verify, draft SOPs, and run drills. Where you own, we coordinate with your creative and operations teams but the brand and product decisions are yours.

Escalation path

Where label or claim work crosses into privileged legal analysis — an Accusation issued under the DCC Disciplinary Guidelines, a trademark or trade-dress dispute (a chocolate bar styled like a Hershey’s, a gummy styled like a Skittle), an FDA-adjacent regulatory challenge on a tincture positioned as supplement-adjacent, a federal advertising complaint, a regulatory-investigation interview request — we coordinate with your retained counsel on a single record rather than running parallel. Where you do not yet have retained counsel and the matter requires one, we make the introduction from our California cannabis bar network. We are a compliance consulting firm; we do not practice law and do not represent clients before administrative law judges.

How we draw the boundary with you

You own: the brand identity, the product portfolio, the design direction, SKU strategy, creative execution, the manufacturing run itself, and any final go/no-go on a launch. We own: the four areas above. Where a compliance red-line conflicts with a creative decision, we write the conflict down with citations so the tradeoff is visible to the brand team and the principal who signs — never absorbed silently. Every label passes back to your designer as a marked-up PDF with a cited reason for every change, and the corrections memo summarizes the same conflict map.

What’s explicitly out of scope

Graphic design, creative direction, photography, brand voice work, trademark registration, and copyright prosecution are not within scope — those are specialist fields with their own practitioners and we route them. The analytical testing itself is out of scope: lab selection and COA interpretation are within scope, but the analytical work sits with a DCC-licensed Type 8 Testing Laboratory. Hemp-derived cannabinoid products regulated by CDPH under AB 45 are out of scope on the DCC side; we coordinate with a CDPH-facing consultant where the product line crosses the boundary. CDTFA tax filings, real estate, and capital raises remain with their respective practice areas.

The engagement runs through five named milestones over four weeks plus an ongoing monitor. Product and label compliance in California is uniquely unforgiving because labels are a public-facing artifact — every potency miscalculation, every unsubstantiated claim, every missed warning statement is visible to DCC, CDPH, retailers, and consumers at the same time. The work is to close every gap before the SKU reaches shelf.

Milestones, in detail

• Week 1 — SKU inventory and baseline. Full inventory of active SKUs with license type, product category (flower, pre-roll, edible, beverage, tincture, topical, vape cartridge, integrated vaporizer, concentrate, suppository), packaging format, current claim inventory, current CRP mode, and current compliance posture. Each SKU tagged with its governing authority — CCR § 17400 et seq. for packaging and labeling, CCR § 15724 for the ±10% label-to-COA tolerance, BPC §§ 26120, 26121, 26152, 26152.1 for statutory packaging and advertising rules, and AB 1894 for vape SKUs. Baseline red-flag register produced by end of week with severity ranked: distributor-embargo-grade findings (self-generated UID, missing warning, CRP mode mismatch) versus relabel-grade findings (THC outside ±10% band) versus copy-edit findings (manufacturer DBA stale).
• Week 2 — Primary and information panel red-line. Every SKU label red-lined against CCR § 17400 et seq. and the DCC labeling guidance. Primary panel: product identity, the DCC-issued universal symbol at minimum 0.5″×0.5″ in black, net weight in both metric and U.S. customary units, “Cannabis-Infused” bold-and-larger above the product identity on edibles. Information panel: manufacturer identification matching DCC license, license number, the live METRC UID, packaging date, ALL-CAPS bold government warning per BPC § 26121, cannabinoid disclosures (mg per serving and mg per package for edibles, percentages for flower, with the ±10% CCR § 15724 reconciliation), allergen statement, ingredient list, instructions, and batch info. Marked-up PDFs delivered to your designer with a summary corrections memo and the regulation section cited on every change.
• Week 3 — CRP, tamper-evidence, and UID audit. Every package configuration verified against the federal Poison Prevention Packaging Act standard at 16 CFR § 1700.1(b)(4). CRP mode (initial vs. lifetime) confirmed against product format with the “not child-resistant after opening” statement on every initial-CRP package. Tamper-evidence method (shrink band, perforated seal, safety button, heat-seal) confirmed; opacity confirmed for edibles; resealability confirmed for multi-serving formats; imitation-of-children’s-product test applied. Every UID confirmed live from METRC at print time, never typed. Vape SKUs additionally cleared against AB 1894 and BPC §§ 26120(f) / 26152.1: inner-cartridge symbol, hazardous-waste language, no “disposable” or “recyclable” descriptors.
• Week 4 — Recall SOP and CAP playbook. BPC § 26131 recall SOP drafted to your distribution footprint. Pre-drafted notification templates for DCC, CDPH (where the SKU is an edible), retailers, distributors, and consumers, versioned and stored. The Form DCC-LIC-017 corrective action plan template prepared in advance. Annual mock-recall drill run on a real SKU from shelf to METRC destruction documentation with a debrief memo identifying time-to-shelf-pull, time-to-notification, and any gap in the response. Distributor (Type 11) coordination clarified: distributors may relabel for lab-result figures, but remediation requires a DCC-approved CAP filed by the manufacturer first.
• Ongoing — Amendment-tracking monitor. Monthly scan of CCR Title 4 Division 19 Article 5 amendments, BPC §§ 26120-series statutory amendments, DCC labeling guidance updates, and DCC rulemaking dockets. Each amendment translated into a label-revision action matrix before the effective date. Active items in the queue: AB 1894 vape disposal language enforcement; the late-2025 allergen-disclosure guidance; the post-April-2026 Schedule III watch on the BPC § 26121 government warning text (state law has not yet amended the statutory warning to reflect federal rescheduling, and operators continue using the existing statement until DCC formally amends).

Duration and rhythm

Standard project is four weeks for operators with up to 25 SKUs, six weeks for 25–60 SKUs, eight to ten weeks for larger brand houses with shared-use or co-pack arrangements. Ongoing amendment-tracking monitor runs $750–$1,500 per month depending on SKU count and category mix. Urgent red-lines for in-flight product launches run on a compressed 72-hour timeline at an urgency premium — useful when a launch hits with insufficient internal compliance bandwidth and the alternative is launching non-compliant. Mock-recall drills run annually as the cadence anchor for the recall SOP; ad-hoc drills add when distribution footprint changes materially.

Who you work with each phase

A named principal owns the engagement, signs every red-line, and is the single point of contact for every status call and every escalation. A compliance analyst handles the SKU inventory, substantiation-file construction, METRC UID verification, and the amendment-tracking monitor. Your creative director or packaging lead coordinates the red-line handoff and revision cycles. Your QA or manufacturing lead coordinates on batch-record integration and the recall SOP. Your distributor (Type 11) is looped on relabeling-pathway items and on COA reconciliation. Your retained counsel reviews claim-substantiation boundary items where litigation risk is a factor — we produce the compliance analysis; counsel decides on disclosed-claim language.

When the engagement closes, you hold a specific set of SKU red-lines, verification certificates, SOPs, substantiation files, and audit-trail artifacts. These are not review notes. They are release-gate documents your operations team clears every SKU against, defensible against DCC inspection, CDPH review, retailer compliance checks, and buyer diligence for years.

The ten outputs, in detail

• Primary and information panel red-line packet. Every SKU red-lined against CCR § 17400 et seq. and the DCC labeling guidance, delivered as a marked-up PDF with the regulation section cited on every correction. Primary panel coverage: product identity, the DCC-issued universal symbol at minimum 0.5″×0.5″ in black, net weight in both metric and U.S. customary units, the “Cannabis-Infused” statement bold-and-larger above the product identity on edibles. Information panel coverage: manufacturer ID matching DCC license, license number, METRC UID, packaging date, the BPC § 26121 government warning ALL-CAPS bold, cannabinoid disclosures with the ±10% CCR § 15724 reconciliation, allergen statement, ingredients, instructions, and batch info. Typical packet runs 8–25 pages depending on SKU count.
• Label-to-COA reconciliation worksheet. Every label THC and CBD figure reconciled against the lab Certificate of Analysis from a DCC-licensed Type 8 Testing Laboratory inside the ±10% CCR § 15724 band. Worksheet rows include batch number, COA reference, COA effective date, label version, label THC%, COA THC%, deviation, pass/fail, and distributor relabel disposition where applicable. The worksheet is what the distributor’s QA team works against at the gate.
• CRP, tamper-evidence, and opacity verification log. Every package configuration verified against the federal Poison Prevention Packaging Act standard at 16 CFR § 1700.1(b)(4). Log captures CRP mode (initial vs. lifetime), the “not child-resistant after opening” statement on initial-CRP, tamper-evidence method, opacity for edibles, resealability for multi-serving formats, and the imitation-of-children’s-product test. Re-verification triggered on every packaging material change. Certificate copies filed in the vault, dated, cross-referenced to SKU.
• Vape-SKU AB 1894 audit. For every vape cartridge and integrated vaporizer: universal symbol on the inner cartridge or device (not just the outer box), packaging and ads clearly mention proper hazardous-waste disposal, no “disposable,” “trash-ready,” or “recyclable” descriptors per BPC § 26120(f), Prop 65 carcinogen and reproductive-toxin warnings reflected, and battery/electrical safety statements present. The audit closes the most common open exposure on existing vape SKUs.
• Government warning statement verification. The exact statutory text under BPC § 26121 verified ALL-CAPS bold, with specialty warnings for vape, concentrate, and edible categories. Photographed, dated, and filed at the as-printed standard. Watch item: state law has not (as of April 2026) updated the statutory warning to reflect the April 22, 2026 federal Schedule III action on state-licensed medical cannabis — operators continue using the existing statement until DCC formally amends the rule, and we monitor the docket.
• Claims substantiation file. Every marketing claim (on-label, website, social, email, POS, shelf-talker) reviewed against FTC Section 5 substantiation doctrine and BPC §§ 26152 and 26152.1 advertising restrictions. Each claim categorized substantiated (source document on file), substantiable (source document obtainable), or prohibited (must remove). Required disclaimers verified: the 21+ statement and the license number of the advertiser on every advertising touchpoint.
• BPC § 26131 recall SOP and CAP playbook. Recall SOP drafted to your distribution footprint with chain-of-custody, pull radius, and destruction documentation. Pre-drafted notification templates for DCC, CDPH (where the SKU is an edible), retailers, distributors, and consumers, versioned and stored. The Form DCC-LIC-017 corrective action plan template prepared in advance. Annual mock-recall drill run on a real SKU from shelf to METRC destruction with a written debrief memo.
• Allergen-control program. For shared-use kitchens, co-pack operations, and multi-SKU manufacturing lines: allergen disclosure per FDA-style conventions covering milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame; cleaning validation records; line-changeover protocols; and lot-quarantine procedures. Aligned to the late-2025 DCC allergen-disclosure guidance now an inspection focus area.
• METRC UID and batch traceability map. Live METRC UID pulled at print time for every package, never typed. Batch-to-label-to-distributor-manifest-to-METRC-tag map maintained against CCR § 15037 seven-year retention. Supplier COA audit protocol for incoming raw flower, oil, distillate, and excipients with quarantine for non-conforming lots before manufacturing release.
• Amendment-tracking monitor and label-revision action matrix. Monthly scan of CCR Title 4 Division 19 Article 5 amendments, BPC §§ 26120-series statutory amendments, DCC labeling guidance updates, and DCC rulemaking dockets. Each amendment translated into a label-revision action matrix before the effective date. Active queue items: AB 1894 vape enforcement, late-2025 allergen guidance, post-Schedule-III warning-text watch.

Format and delivery

Every marked-up label delivered as a PDF with a companion editable source for handoff back to your designer (InDesign, Illustrator, or production-ready PDF). Every SOP delivered as Word and PDF. Audit-trail spreadsheets delivered as Excel. All documents filed in a date-stamped vault, naming convention is SKU-then-document-then-revision-date so the version DCC, CDPH, the distributor, or the buyer reviewed is always retrievable. Retained for seven years per CCR § 15037 to align with statewide cannabis recordkeeping.

Defensibility anchor

Every red-line, SOP, and substantiation file cites the authority. CCR § 17400 et seq. for packaging and labeling. CCR § 15724 for the ±10% label-to-COA tolerance. CCR § 15037 for the seven-year recordkeeping. 16 CFR § 1700.1(b)(4) for child-resistance. BPC § 26120 and § 26121 for packaging and warning text. BPC § 26131 for recall and product safety. BPC §§ 26152 and 26152.1 for advertising. AB 1894 for vape disposal language. FTC Section 5 for substantiation. Form DCC-LIC-017 for the corrective action plan. If a DCC inspector, a CDPH reviewer, a retailer’s compliance officer, or a buyer’s diligence team asks “why?”, the answer is in the document.

What’s not included

Graphic design, creative direction, photography, brand voice, trademark filing, and copyright registration are explicitly outside scope — those are specialist fields with their own practitioners and we route them. The analytical testing itself is out of scope: lab selection and COA interpretation are within scope, but the analytical work sits with a DCC-licensed Type 8 Testing Laboratory. Hemp-derived cannabinoid products regulated by CDPH under AB 45 are out of scope on the DCC side. Real estate, capital raises, CDTFA tax filings, and 280E structuring sit with their respective practice areas. The engagement letter names every boundary from day one.

Deliverables are what we produce. Outcomes are what those deliverables enable — the specific operational advantages of product and label compliance done right. A clean label is a brand asset; a non-compliant label is a recall risk, a retailer-deshelving risk, and a buyer-diligence failure all at once.

The ten outcomes, in detail

• Every UID is live, never typed. Every package carries the live METRC UID pulled at print time, with the print-time pull logged. Self-generated UIDs — the most common cause of distributor-stage embargo — are eliminated at the source. The integration ties to METRC and the package-level traceability that runs through CCR § 15037 seven-year retention.
• Every label THC/CBD reconciles to its COA. Every label THC and CBD figure reconciled against the COA inside the ±10% CCR § 15724 band, with the reconciliation worksheet on file by batch number. The distributor (Type 11) clears the gate without holding inventory; relabel work moves on the COA-update cadence, not as a fire drill.
• Every claim is substantiated. Marketing claims, product claims, comparative claims — each tied to a source document. FTC Section 5 substantiation doctrine satisfied; BPC §§ 26152 and 26152.1 advertising restrictions honored; required disclaimers (21+ and license number of the advertiser) verified on every advertising touchpoint, including digital channels with age-gating in place.
• No imitation of children’s products. Packaging, imagery, flavors, and names screened against the prohibition on imitating products marketed to children (cartoon characters, fruit shapes, candy references) and on imitating non-cannabis branded products (Hershey-style chocolate, Skittle-style gummies). Both rules carry parallel private-action exposure on top of state enforcement.
• CRP mode and tamper-evidence verified. Every packaging configuration verified against 16 CFR § 1700.1(b)(4). Initial-CRP packages carry the “not child-resistant after opening” statement; lifetime-CRP is in place where required (multi-serving edibles, multi-serving concentrates, suppositories). Tamper-evidence, opacity for edibles, and resealability for multi-serving formats confirmed. Re-verification protocol triggers on every packaging material change.
• Government warning is exact, ALL-CAPS, bold. The BPC § 26121 warning text appears verbatim in capital letters and bold font on every SKU. Specialty warnings on vape (Prop 65 carcinogen and reproductive toxin, AB 1894 hazardous-waste disposal), concentrate, and edible categories included where applicable. Watch on the post-Schedule-III warning amendment is active.
• Per-serving and per-package THC inside the rule. Adult-use edibles inside the 10 mg per serving and 100 mg per package ceiling; medicinal edibles inside the 2,000 mg per package ceiling; non-edibles inside the 1,000 mg / 2,000 mg adult-use / medicinal ceilings. Servings physically distinguishable; edibles homogeneity-tested at lab. Reformulation recommendations made before the artwork goes to print.
• Recall-ready in hours. A BPC § 26131 recall playbook, DCC and CDPH notification templates, distributor and retailer pull lists, METRC destruction procedure, and a Form DCC-LIC-017 corrective action plan template wire into one runbook. The annual mock drill is run on a real SKU. A real recall closes in hours; retailer notifications go out on the same cycle as the DCC notification.
• Allergen disclosures clean. Common food allergens (milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, sesame) disclosed FDA-style with “Contains:” statements or ingredient-list parentheticals. The late-2025 DCC allergen-disclosure guidance is implemented; cleaning validation, line-changeover, and lot-quarantine records are in place for shared-use and co-pack operations.
• Retailer and buyer diligence clean. Retailer compliance checks pass on first review; buyer diligence finds a UID-live print log, a label-to-COA reconciliation worksheet, a substantiation file, a CRP verification log, a BPC § 26131 recall SOP, and a clean amendment-tracking history. Brand transactions execute at valuation, not at discount.

How we measure

Three quantitative measures: (1) distributor-stage embargo events on outbound batches — target zero on every release after engagement close; (2) label-revision turnaround on amendment publication — target under 10 business days from effective date; (3) mock-recall time-to-shelf-pull — target under 48 hours for retail partners within 50 miles, under 72 hours statewide. Reported in the quarterly summary memo with the underlying batch numbers and the regulation citations behind every release decision.

Post-engagement review

Sixty days after engagement close, a structured 60-minute review covering: every red-line implemented on shelf SKUs, every label-to-COA reconciliation worksheet confirmed in the vault, every substantiation file source-checked, every CRP cert dated and current, the BPC § 26131 recall SOP tested against the current distribution footprint, and the next quarter’s amendment queue (including AB 1894 follow-through and the post-Schedule-III warning watch). Written memo closes the engagement and seeds the amendment-tracking monitor if you continue on subscription. If you don’t, the memo is your starting baseline for the next review cycle.

When DCC asks “why did you label this way?” we cite the regulation. When CDPH inquires on a cannabis edible, we cite the section. When FTC asks about a claim, we cite Section 5 substantiation doctrine. When a buyer asks for proof on a CRP cert, we surface the federal benchmark. Product-and-label work rests on a layered authority stack of California statute (BPC), California regulation (CCR Title 4 Division 19), federal regulation incorporated by reference (16 CFR), federal advertising doctrine (FTC Section 5), DCC labeling guidance, and DCC forms.

Business & Professions Code (statute)

• BPC § 26120 — Packaging. The statutory basis for child-resistant, tamper-evident, and resealable packaging requirements, the universal symbol mandate, the prohibition on imitating products marketed to children, and the vape-specific rules at subsection (f) (universal symbol on inner cartridge, hazardous-waste disposal language, no “disposable” descriptors). In practice, every CCR § 17400-series packaging requirement traces back here.
• BPC § 26121 — Required label content. The statutory list of label content including the exact government warning text, the 21+ language, and the keep-out-of-reach language. In practice, the warning statement is the single most-enforced item on the label and must appear ALL-CAPS bold — paraphrasing or abbreviating it is one of the most common DCC findings.
• BPC § 26131 — Product safety and recall. The statutory basis for recall reporting obligations and DCC recall authority. In practice, the recall SOP is written to BPC § 26131 reporting structure with the Form DCC-LIC-017 corrective action plan as the gating document — reworking product without DCC approval is itself a more serious violation than the original finding.
• BPC § 26152 — Advertising restrictions. Bars advertising attractive to minors, false or misleading health claims, cartoons, advertising to anyone under 21, and placement within 1,000 feet of schools, daycares, youth centers, and playgrounds (with the limited indoor-signage exception). Required disclaimers (21+ statement, license number of the advertiser) on every touchpoint. In practice, BPC § 26152 is the statutory substrate for the claims substantiation review.
• BPC § 26152.1 — Vape-specific advertising and packaging. Codifies the AB 1894 vape-disposal labeling requirements, the universal-symbol-on-inner-cartridge rule, and the prohibition on labeling a vape as “disposable,” “trash-ready,” or “recyclable.” In practice, BPC § 26152.1 is the vape-SKU audit anchor — existing vape labels routinely fail on the “disposable” descriptor alone.

California Code of Regulations Title 4 Division 19 (DCC operational rules)

• CCR § 17400 et seq. — Article 5 packaging and labeling. The umbrella regulation covering primary panel and information panel content, universal symbol specifications, net-weight declaration in metric and U.S. customary units, the “Cannabis-Infused” statement on edibles, manufacturer identification, license number, METRC UID, packaging dates, allergen statements, ingredients, instructions, and batch information. In practice, this is the foundational regulation for every SKU red-line — the corrections memo cites the specific subsection on every finding.
• CCR § 15724 — Label-to-COA deviation tolerance. Allows up to ±10% deviation between the total THC or total CBD percentage on the label and the percentage reported on the lab Certificate of Analysis. In practice, the ±10% band is the distributor-stage QA gate — anything outside requires a relabel before sale, and distributors may relabel for lab-result figures but may not remediate the goods themselves.
• CCR § 15037 — Recordkeeping and retention. Seven-year retention for cannabis records, including label-to-COA reconciliation worksheets, CRP certifications, supplier COAs, recall documentation, mock-drill debriefs, and the Form DCC-LIC-017 corrective action plans. In practice, § 15037 is the retention horizon every label artifact is built to.

Federal authorities and DCC forms

• 16 CFR § 1700.1(b)(4) — Poison Prevention Packaging Act “special packaging.” The federal child-resistant packaging benchmark DCC adopts by reference. The standard requires packaging designed to be significantly difficult for children under five to open and not difficult for normal adults. In practice, CRP mode (initial vs. lifetime) is verified against this standard, with the “not child-resistant after opening” statement on every initial-CRP package.
• AB 1894 — Vape disposal labeling (effective 2024). Requires vape packaging and advertising to clearly mention proper hazardous-waste disposal and prohibits descriptors like “disposable,” “trash-ready,” or “recyclable.” In practice, AB 1894 enforcement is moving from education-first to citation-first; the vape-SKU audit closes the most common open exposure.
• FTC Section 5 — Substantiation doctrine. Federal advertising doctrine requiring a reasonable basis for every objective product claim. Not California-specific but applied to every cannabis brand with digital marketing presence (website, social, email) that reaches across state lines. In practice, substantiation review pairs Section 5 with the BPC §§ 26152 / 26152.1 cannabis-specific restrictions.
• Form DCC-LIC-017 — Corrective Action Plan. The form filed when a Notice to Comply or other DCC finding requires remediation, including any relabel or repackaging following a label compliance failure. In practice, the CAP becomes a regulatory commitment the moment it is filed; failure to execute is a more serious violation than the original finding. Hidden remediation without an approved CAP is routinely caught and escalated.
• DCC packaging and labeling guidance. The DCC’s public guidance pages at cannabis.ca.gov/packaging and cannabis.ca.gov/labeling, plus the late-2025 allergen-disclosure guidance now an inspection focus area. In practice, the guidance pages are the authoritative source for the universal-symbol asset and for current enforcement priorities.

How the authorities interact

Statute (BPC §§ 26120, 26121, 26131, 26152, 26152.1) sets the framework. CCR Title 4 Division 19 (§ 17400 et seq. and § 15724) implements it operationally on the label. The federal CRP standard at 16 CFR § 1700.1(b)(4) is incorporated for child-resistance. AB 1894 layers on the vape-specific disposal requirements. FTC Section 5 governs substantiation across digital channels. METRC track-and-trace ties the label to the physical package, and CCR § 15037 sets the seven-year retention horizon. Form DCC-LIC-017 is the gating instrument when something must be relabeled or repackaged. If any layer falls out of sync — a stale DBA on the manufacturer line, a vape SKU using “disposable” language, an edible whose servings are not physically distinguishable — the entire SKU release is exposed. The integrated stack is what defends the brand at DCC inspection, at retailer compliance review, and at M&A diligence.

Scope, pricing, timelines, edge cases — the questions brands and manufacturers actually ask about product and label compliance.

• Where exactly does the universal symbol go and what version is acceptable? The universal symbol is the black triangle with an exclamation point, a cannabis leaf, and the letters “CA” beneath. It must appear on the primary panel, in black, at minimum 0.5″×0.5″. Only the exact DCC-issued asset is acceptable — no recolors, no white backgrounds, no third-party redraws, no proportional changes other than scaling. Designers regularly re-create the symbol from memory; QA must enforce use of the official file from the DCC packaging guidance page. Common citations involve symbols below the 0.5″ minimum, partially obscured by a seam or label edge, or an off-brand white-background variant.
• How does the ±10% label-to-COA deviation tolerance work in practice? Under CCR § 15724, the total THC or total CBD figure on the label may deviate up to ±10% from the value reported on the lab Certificate of Analysis. Anything outside that band requires a relabel before the SKU may be sold. Distributors (Type 11) are the QA gatekeeper that catches this — distributors may apply final lab-result figures and may relabel for the lab result, but they may not remediate the goods themselves. Remediation requires a Form DCC-LIC-017 corrective action plan filed and approved by DCC before the manufacturer acts.
• What does AB 1894 require for vape labeling and packaging? AB 1894 (effective 2024) and BPC §§ 26120(f) and 26152.1 set vape-specific rules: the universal symbol must appear on the inner cartridge or device itself (not just the outer box); packaging and ads must clearly mention proper hazardous-waste disposal; and labeling cannot describe the device as “disposable,” “trash-ready,” or “recyclable.” Cannabis smoke is also a Prop 65 carcinogen and THC a Prop 65 reproductive toxin, both of which must reflect in the warnings. Existing vape SKUs frequently fail on the “disposable” language alone — an audit of every vape SKU against AB 1894 is the first move.
• What are the per-serving and per-package THC ceilings? Adult-use edibles are limited to 10 mg THC per serving and 100 mg per package; medicinal edibles are limited to 10 mg per serving and 2,000 mg per package. Adult-use non-edibles (tinctures, capsules, topicals) cap at 1,000 mg per package; medicinal non-edibles at 2,000 mg. Servings must be physically distinguishable — a 100 mg bar must split cleanly into ten 10 mg squares, not be a single block. Edibles must also demonstrate homogeneity at lab so each serving carries the same THC load.
• When is initial-CRP allowed and when is lifetime-CRP required? The federal benchmark is the Poison Prevention Packaging Act “special packaging” standard at 16 CFR § 1700.1(b)(4). Initial-CRP is allowed for flower, flower-only pre-rolls, inhaled concentrates (vape carts, shatter, wax), and single-serving products — but the package must carry the statement “This package is not child-resistant after opening.” Lifetime-CRP is required for multi-serving edibles, multi-serving concentrates, suppositories, and any package the consumer expects to access multiple servings from. Multi-serving formats must also be resealable in a way that maintains child-resistance through the package life. Edibles must additionally be in opaque packaging.
• What does the government warning have to say, exactly? The exact statutory text under BPC § 26121 must appear in ALL CAPS and bold: “GOVERNMENT WARNING: THIS PRODUCT CONTAINS CANNABIS, A SCHEDULE I CONTROLLED SUBSTANCE. KEEP OUT OF REACH OF CHILDREN AND ANIMALS. CANNABIS PRODUCTS MAY ONLY BE POSSESSED OR CONSUMED BY PERSONS 21 YEARS OF AGE OR OLDER UNLESS THE PERSON IS A QUALIFIED PATIENT. CANNABIS USE WHILE PREGNANT OR BREASTFEEDING MAY BE HARMFUL. CONSUMPTION OF CANNABIS PRODUCTS IMPAIRS YOUR ABILITY TO DRIVE AND OPERATE MACHINERY. PLEASE USE EXTREME CAUTION.” Paraphrasing, abbreviating, or dropping the ALL-CAPS bold treatment is one of the most common DCC findings. The April 22, 2026 federal rescheduling of state-licensed medical cannabis to Schedule III has not yet flowed through to a state-statute warning amendment — operators continue using the existing statement until DCC formally amends the rule.
• How are allergens disclosed? Common food allergens used in cannabis edibles — milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, sesame — must be disclosed FDA-style, either through a “Contains:” statement or via parenthetical in the ingredient list. DCC issued allergen-disclosure guidance in late 2025 emphasizing that operators are expected to understand how allergens may appear, and proactive allergen-control programs are now an inspection focus area. “May contain” hedges are not a substitute for specific declarations.
• Why is a self-generated METRC UID such a serious problem? A self-generated UID — a placeholder typed onto the package because the METRC tag was not yet issued at print time — is a violation that triggers immediate distributor embargo. Every package UID must be the actual METRC-issued identifier, pulled live at print time. The remediation pathway is a Form DCC-LIC-017 corrective action plan filed and approved by DCC before any relabel; an unauthorized rework is a more serious violation than the original.
• What can’t the packaging look like? Packaging cannot resemble candy, soda, cookies, fruit shapes, or other products typically marketed to or attractive to children, and it cannot mimic the trade dress of non-cannabis branded products (a chocolate bar styled like a Hershey’s, a gummy styled like a Skittle). Cartoon characters, school imagery, and toy themes trigger the same prohibition. Trademark holders frequently bring private actions on top of state enforcement, so the exposure is doubled.
• Do you work with our packaging designer? Yes. We provide compliance red-lines as marked-up PDFs with the regulation cited on every change; your creative team owns the design, brand voice, and art direction. Editable handoff comes back to your designer in InDesign, Illustrator, or production-ready PDF. Typical revision cycle is two rounds — initial red-line, designer revision, compliance verification, release. Where a creative decision conflicts with a compliance requirement, we write the conflict down with citations so the tradeoff is visible to brand leadership.
• How do you handle recalls? We build the BPC § 26131 recall SOP tailored to your distribution footprint, draft DCC and CDPH notification templates, prepare the Form DCC-LIC-017 corrective action plan template, and run an annual mock drill on a real SKU from shelf to METRC destruction with full documentation. Hidden recalls — reworking product without DCC approval — are routinely caught and result in escalated discipline. If a real recall triggers, we coordinate DCC notification, CDPH notification where applicable, retailer and distributor notifications, and the METRC destruction event on a single timeline.
• Can you review claims on our website and social media too? Yes — and we recommend it. Marketing claims on digital channels carry the same substantiation obligation as label claims under FTC Section 5 doctrine and BPC §§ 26152 and 26152.1 advertising restrictions, plus age-gating obligations and the prohibition on geo-targeting minors. The substantiation file covers on-label, website, social, email, POS, and shelf-talker claims as a single integrated review. Required disclaimers (the 21+ statement and the license number of the advertiser) are verified on every touchpoint.
• Do you handle co-pack or white-label arrangements? Yes. Co-pack introduces additional surface area: both licensees identified correctly on the label with correct license numbers, batch-record integration across two operations, allergen-cross-contact documentation in the shared kitchen, clear recall-responsibility assignment in the contract, and quarantine procedures for incoming non-conforming lots. The compliance work is the same scope but with more moving parts and a tighter contractual layer.
• What’s the cost? Standard engagement runs $8,000–$35,000 depending on SKU count, product-category mix (edibles and vapes carry more rule surface area than flower or pre-rolls), and substantiation complexity. Ongoing amendment-tracking monitor adds $750–$1,500 per month. Urgent single-SKU red-line plus recall readiness is typically $3,000–$6,000 on a 72-hour timeline — useful when a launch hits with insufficient internal compliance bandwidth and the alternative is launching non-compliant. Ongoing Compliance Retainer clients get label work at a reduced project rate.
• What about hemp or CBD products? California AB 45 regulates hemp-derived cannabinoids at CDPH; DCC does not have jurisdiction there. We cover the DCC-regulated cannabis side. For hemp CBD products regulated by CDPH, we coordinate with a CDPH-facing consultant if the scope requires it. Operators with a mixed cannabis/hemp portfolio should expect two parallel compliance tracks until the federal framework changes.