Complete 2025-2026 Deep Dive | Marijuana Enforcement Division (MED)

Last Updated: December 20, 2025 Effective Through: January 5, 2026 (new rules effective) Version: 2025.4

🎯 QUICK REFERENCE

Colorado Marijuana Enforcement Division (MED) 📞 Phone: (303) 205-2300 📧 Email: DOR_MED@state.co.us 🌐 Website: https://med.colorado.gov 📍 Office: 1707 Cole Blvd, Lakewood, CO 80401

Metrc Colorado: 📞 Support: (877) 566-6506 📧 Email: support@metrc.com 🌐 Login: https://co.metrc.com

Emergency/After Hours: Use MED inquiry form at med.colorado.gov

Pioneering States: Colorado and Oregon’s Cannabis and Psilocybin Reforms in Late 2025In late 2025, Colorado and Oregon stand out as trailblazers in U.S. substance policy reform, each balancing thriving cannabis industries with innovative therapeutic psilocybin programs. With the recent federal rescheduling of cannabis to Schedule III via President Trump’s December 18 executive order, these states are poised for further growth,Canna SecureCannaSecure

⚡ WHAT’S NEW FOR 2025-2026

MAJOR CHANGES EFFECTIVE JANUARY 5, 2026:

✅ Licensing Simplification (SB 24-076 & HB 25-1209)

  • Unified application process for multi-license holders
  • Lower fees for businesses with same ownership across multiple licenses
  • Name-based background checks replace fingerprint-based (faster, cheaper)
  • Social equity eligibility criteria changes (applications after Feb 1, 2025)

✅ Operational Rule Updates

  • “Production Batch” concept replaces “Harvest Batch” in many cases
  • Updated packaging requirements for pre-rolls
  • New inventory limits for mixed indoor/outdoor cultivators
  • “R-and-D Units” replace “Sampling Units” (streamlined employee sampling)

✅ Testing Updates

  • Potency testing aligned with hemp standards (where appropriate)
  • Contaminant testing updates
  • Reduced Testing Allowance requires 80% compliance score
  • Surveillance testing program announced (Sept 2025)

✅ Product Changes

  • Non-cannabis food/beverages allowed at licensed premises (SB 24-076)
  • Expiration date requirements for edible products (effective Feb 6, 2025)
  • Updated advertising rules for marijuana concentrate

✅ Genetic Material Procurement

  • Cultivation facilities can obtain seeds/immature plants from ANY licensed jurisdiction
  • Expanded definition of “genetic material” includes tissue culture
  • THC concentration limit: ≤0.3% on dry weight basis

TABLE OF CONTENTS

PART 1: COLORADO CANNABIS LANDSCAPE

1.1 Colorado Cannabis Market Overview 1.2 License Types & Requirements 1.3 MED vs Local Jurisdiction Authority 1.4 Medical vs Retail Cannabis Differences 1.5 Key Regulatory Dates for 2025-2026

PART 2: LICENSING & BUSINESS FORMATION

2.1 License Application Process (2026 Updates) 2.2 Unified Licensing (Multi-Location Operators) 2.3 Background Checks (New Name-Based System) 2.4 Social Equity Licensing 2.5 License Fees & Renewal Timeline 2.6 Controlling Beneficial Ownership (CBO) Requirements

PART 3: METRC COMPLIANCE (COLORADO-SPECIFIC)

3.1 Colorado Metrc Requirements 3.2 Sync Requirements: 15-Minute Maximum 3.3 RFID Tag Requirements (All Plants & Packages) 3.4 API Security & Credential Management 3.5 Daily Reconciliation Procedures 3.6 Common Metrc Violations & Penalties

PART 4: CULTIVATION COMPLIANCE

4.1 Plant Count Limits 4.2 Immature Plant Definitions 4.3 Plant Tracking (Seed to Harvest) 4.4 Environmental Compliance & Reporting 4.5 Waste Disposal Requirements 4.6 Genetic Material Procurement (2026 Updates)

PART 5: MANUFACTURING & PROCESSING

5.1 Production Batch Tracking (New 2026 Rules) 5.2 Extraction Methods & Safety 5.3 Infused Product Manufacturing 5.4 R-and-D Units (New Employee Sampling Rules) 5.5 Quality Control Procedures 5.6 Centralized Distribution Permits

PART 6: TESTING REQUIREMENTS

6.1 Mandatory Testing Overview 6.2 Reduced Testing Allowance (80% Compliance Score) 6.3 Potency Testing Standards 6.4 Contaminant Testing Requirements 6.5 Test Batch Creation 6.6 Failed Test Procedures 6.7 Approved Testing Facilities

PART 7: RETAIL & DISPENSARY OPERATIONS

7.1 Store Operations & Customer Flow 7.2 Age Verification (Dual Check Requirement) 7.3 Sales Limits & Tracking 7.4 Exit Packaging Requirements 7.5 Cash Handling Procedures 7.6 Employee Training (Responsible Vendor Program)

PART 8: PACKAGING & LABELING

8.1 Child-Resistant Packaging (Mandatory) 8.2 Opaque Exit Packaging 8.3 Label Requirements (Complete Checklist) 8.4 THC/CBD Potency Statements 8.5 Expiration Dates (New Edible Requirements) 8.6 Decontaminated Product Labeling (2025) 8.7 Pre-Roll Packaging Updates (2026)

PART 9: SECURITY & SURVEILLANCE

9.1 Video Surveillance Requirements 9.2 40-Day Retention Minimum 9.3 Camera Placement & Coverage 9.4 Monthly Equipment Testing Protocols 9.5 Access Control Systems 9.6 Alarm Systems & Monitoring 9.7 Transport Security

PART 10: ADVERTISING & MARKETING

10.1 Permitted Advertising Channels 10.2 Prohibited Marketing Practices 10.3 Social Media Guidelines 10.4 Identity Statement Requirements 10.5 New Concentrate Advertising Rules (2025)

PART 11: TRANSPORT & DISTRIBUTION

11.1 Manifest Requirements 11.2 Vehicle Requirements 11.3 Route Planning & Documentation 11.4 Unreceived Manifest Procedures 11.5 Centralized Distribution Operations

PART 12: EMPLOYEE COMPLIANCE

12.1 Support License vs Associated Key License 12.2 Badge Application Process 12.3 In-Person Appointments (Lakewood, CO Springs, Grand Junction) 12.4 Responsible Vendor Program (Minimum Instruction Time) 12.5 Employee Sampling (R-and-D Units) 12.6 Termination Procedures

PART 13: ENFORCEMENT & PENALTIES

13.1 Colorado Tiered Penalty System 13.2 Common Violations & Fines 13.3 License Suspension Triggers 13.4 License Revocation Scenarios 13.5 Administrative Hearing Process 13.6 Appeal Procedures

PART 14: AUDITS & INSPECTIONS

14.1 What MED Auditors Check 14.2 Announced vs Unannounced Inspections 14.3 Pre-Audit Checklist (90-Day Prep) 14.4 During the Audit: Do’s and Don’ts 14.5 Responding to Violations 14.6 Corrective Action Plans

PART 15: SPECIAL TOPICS

15.1 Multi-State Operator (MSO) Compliance 15.2 Vertical Integration Strategies 15.3 Banking & Financial Compliance 15.4 IRS 280E Documentation 15.5 Environmental Sustainability Requirements 15.6 Hemp vs Marijuana Distinctions

Cannabis Business Security Tools | cannabisrisk.diyComprehensive security tools, checklists, and compliance resources for cannabis businesses. Estimate breach costs, audit PoS, review vendor security, and more.cannabisrisk.diy

PART 1: COLORADO CANNABIS LANDSCAPE

1.1 Colorado Cannabis Market Overview

Market Size & Scope:

  • Colorado legalized medical marijuana: 2000 (Amendment 20)
  • Colorado legalized retail marijuana: 2012 (Amendment 64)
  • First retail sales: January 1, 2014
  • 2024 total sales: $1.2 billion+ (combined medical + retail)
  • Active licenses: 2,000+ (cultivation, manufacturing, retail, testing)

Regulatory Structure:

  • State Authority: Marijuana Enforcement Division (MED) - Department of Revenue
  • Local Authority: Cities/counties maintain independent authority
  • Dual Licensing: Both state AND local approval required

Key Distinction: Colorado operates TWO separate regulatory frameworks:

  • Medical Marijuana (1 CCR 212-1) - Patients with red cards
  • Retail Marijuana (1 CCR 212-2) - Adult-use (21+)

As of January 5, 2026: Unified rules (1 CCR 212-3) consolidate many provisions while maintaining distinct medical/retail requirements where necessary.

1.2 License Types & Requirements

CULTIVATION LICENSES:

Medical Marijuana Cultivation Facility

  • Grow medical marijuana for wholesale to medical stores
  • Plant count tiers: Tier 1 (1-1,800), Tier 2 (1,801-6,000), Tier 3 (6,001-10,200)
  • Environmental reporting required (electricity usage upon renewal)
  • May obtain genetic material from any licensed jurisdiction

Retail Marijuana Cultivation Facility

  • Grow retail marijuana for wholesale to retail stores
  • Same plant count tiers as medical
  • Indoor/outdoor/mixed operation types
  • New 2026 inventory limits for mixed cultivators

MANUFACTURING LICENSES:

Medical Marijuana Products Manufacturer

  • Create concentrates, edibles, topicals from medical marijuana
  • Solvent-based, water-based, food-based, rosin production methods
  • Production batch tracking (new 2026 rules)
  • R-and-D unit allowances

Retail Marijuana Products Manufacturer

  • Same as medical but for retail products
  • Must comply with stricter THC limits for certain products
  • Non-infused products allowed for QC/R-and-D

RETAIL LICENSES:

Medical Marijuana Store

  • Sell to patients with valid medical marijuana cards
  • Higher purchase limits than retail
  • HIPAA considerations for patient data
  • May grow immature plants for sale

Retail Marijuana Store

  • Sell to adults 21+ (ID required)
  • Purchase limits: 1oz flower, 8g concentrate, 800mg edibles
  • Dual age verification (door + register)
  • May grow immature plants for sale

OTHER LICENSE TYPES:

Marijuana Testing Facility

  • Independent lab testing (cannot be owned by cultivator/manufacturer)
  • ISO 17025 accreditation required within 1 year
  • CDPHE certification process
  • Annual on-site inspections

Marijuana Transporter

  • Licensed transport-only operations
  • No storage or sales
  • Manifest requirements
  • Vehicle & security standards

Marijuana Hospitality and Sales Business

  • On-site consumption (lounges)
  • Food/beverage service allowed (SB 24-076 - new for 2025)
  • Live entertainment permitted
  • Strict ventilation requirements

Accelerator License

  • Fast-track for social equity applicants
  • Operates as temporary cultivation/manufacturing
  • Converts to standard license after period

1.3 MED vs Local Jurisdiction Authority

TWO-TIER SYSTEM:

Colorado operates dual-licensing:

  • State License (MED) - Required for all operations
  • Local License - Required from city or county

You need BOTH to operate legally.

What MED Controls:

  • Statewide operational standards
  • Product testing requirements
  • Packaging and labeling
  • Metrc compliance
  • Transport between jurisdictions
  • Employee background checks
  • License fees and renewal

What Local Jurisdictions Control:

  • Whether to allow marijuana businesses at all (ban authority)
  • Zoning and location restrictions
  • Additional operating hours
  • Additional security requirements
  • Local licensing fees
  • Number of licenses issued (caps)
  • Community input processes

Critical Note: Local jurisdiction can be MORE restrictive than state, never less.

Example:

  • MED allows cultivation facility with 10,200 plants
  • Denver may limit same license to 3,600 plants
  • Operator must comply with stricter Denver limit

1.4 Medical vs Retail Cannabis Differences

Aspect Medical Marijuana Retail Marijuana

Customer Patients with medical card (any age with doctor approval) Adults 21+

Purchase Limits 2oz flower/day 1oz flower/day

Tax Rate 2.9% state sales tax 15% retail excise + 15% state sales tax + local taxes

Metrc Tag Color Yellow RFID tags Blue RFID tags

Product THC Limits Generally higher limits allowed Stricter limits (edibles: 10mg/serving, 100mg/package)

Packaging Requirements Child-resistant, opaque Child-resistant, opaque (identical)

Advertising Restrictions Moderate Very restrictive

Patient Privacy HIPAA applies Not applicable

Home Grow Limit 6 plants/patient (12/residence) 6 plants/adult (12/residence)

Can One Facility Have Both Licenses? Yes - “Dual license” operations common:

  • Medical Marijuana Store + Retail Marijuana Store (same location)
  • Must maintain separate Metrc tracking (yellow vs blue tags)
  • Separate inventory accounting
  • Clear signage indicating which area is medical vs retail

1.5 Key Regulatory Dates for 2025-2026

ALREADY EFFECTIVE:

January 21, 2025: Social equity eligibility criteria changes (applicants after Feb 1, 2025)

February 6, 2025: Expiration date requirements for edible regulated marijuana products

February 14, 2025: Metrc password requirements updated

August 6, 2025: New packaging/labeling requirements (SB24-76)

  • Pre-roll packaging updates
  • Non-cannabis food/beverage sales at licensed premises

September 19, 2025: Surveillance testing program announced

December 4, 2024 - January 5, 2026: Current rules in effect

UPCOMING:

January 5, 2026: NEW RULES EFFECTIVE (major update)

  • Unified licensing process implementation
  • Production batch rules replace harvest batch
  • R-and-D unit system operational
  • Name-based background checks
  • Reduced testing allowance certification

Ongoing/Annual:

  • License renewal: Based on individual license issue date (varies)
  • Environmental reporting: Upon license renewal
  • Employee badge renewal: Based on badge issue date
  • Monthly equipment testing: Every 30 days
  • Quarterly reconciliation: Every 90 days recommended

PART 2: LICENSING & BUSINESS FORMATION

2.1 License Application Process (2026 Updates)

STEP 1: Determine License Type Needed

Consider:

  • Business model (grow, make, sell, test, transport?)
  • Medical vs retail (or both?)
  • Scale of operation (plant count, square footage)
  • Local jurisdiction requirements

STEP 2: Secure Local Approval FIRST

  • Contact local jurisdiction (city/county)
  • Verify marijuana businesses allowed
  • Check zoning restrictions
  • Apply for local license
  • Obtain local approval letter

DO NOT apply to MED until you have local approval.

STEP 3: Prepare MED Application

Required Documentation:

  • Local license approval
  • Business formation documents (LLC, Corp, Partnership)
  • Articles of incorporation/organization
  • Operating agreement/bylaws
  • Ownership structure chart (all CBOs disclosed)
  • Premises diagram (detailed floor plan)
  • Security plan
  • Inventory control procedures
  • Transportation procedures (if applicable)
  • Waste disposal plan
  • Employee training program
  • Background check results (all owners/key employees)

Financial Documentation:

  • Financial statements (balance sheet, income statement)
  • Tax returns (business + individual owners)
  • Bank account information
  • Proof of capitalization
  • Bond or insurance (if required for license type)

STEP 4: Submit Application via MED Portal

  • Create account at med.colorado.gov
  • Select license type
  • Upload all required documents
  • Pay application fee (non-refundable)
  • Submit application

Application Fees (Effective Dec 4, 2024):

  • Cultivation: $2,000-$14,000 (depends on tier)
  • Manufacturing: $2,500-$5,000
  • Retail Store: $2,500
  • Testing Facility: $2,500
  • Transporter: $500

STEP 5: MED Review Process

Timeline: 90-180 days (varies by complexity)

MED will:

  • Verify local approval
  • Conduct background checks
  • Review financial solvency
  • Inspect premises (pre-license inspection)
  • Review operational plans
  • Check zoning compliance

Common reasons for delay:

  • Incomplete application
  • Background check issues
  • Insufficient capitalization
  • Premises not ready for inspection
  • Local approval expired

STEP 6: Pre-License Inspection

MED inspector will visit premises and verify:

  • Security system operational
  • Video surveillance meets requirements
  • Metrc account activated (if cultivation/manufacturing/retail)
  • Premises matches submitted diagram
  • All signage compliant
  • Employee badges obtained (key personnel)

STEP 7: License Issued

Once approved:

  • License certificate issued
  • License number assigned
  • Posted to MED public database
  • Must be displayed at licensed premises

License is valid for TWO YEARS (as of recent changes - some licenses issued before may be annual)

2.2 Unified Licensing (Multi-Location Operators)

WHAT’S NEW FOR 2026:

SB 24-076 created unified licensing for operators with:

  • Same controlling beneficial owners (CBOs)
  • Multiple license types
  • Separate locations

Benefits:

  • Single application for all licenses
  • Lower fees than individual applications
  • Streamlined renewal process
  • Reduced administrative burden

Eligibility: Must have identical CBOs across all licenses applying for unified license.

Example Qualifying for Unified Licensing:

ABC Cannabis LLC (Owner: John Smith 100%)

  • Medical Cultivation Facility (Location A)
  • Retail Cultivation Facility (Location A)
  • Medical Products Manufacturer (Location B)
  • Retail Products Manufacturer (Location B)
  • Medical Marijuana Store (Location C)
  • Retail Marijuana Store (Location C)

Traditional Process: 6 separate applications, 6 separate fees Unified Process: 1 application, reduced total fee

How to Apply (Effective January 5, 2026):

MED will promulgate specific rules by January 1, 2026. Expected process:

  • Submit unified application via MED portal
  • Designate primary license
  • List all additional licenses under same ownership
  • Upload documentation for all locations
  • Pay unified fee (lower than sum of individual fees)

Current Licensees: If you already have multiple licenses, you may be able to convert to unified licensing during your next renewal (rules pending).

2.3 Background Checks (New Name-Based System)

MAJOR CHANGE EFFECTIVE JANUARY 5, 2026:

Colorado is replacing fingerprint-based background checks with name-based background checks.

Old System (Before Jan 5, 2026):

  • Fingerprints required
  • CBI (Colorado Bureau of Investigation) + FBI check
  • Cost: ~$39.50-$53 per person
  • Processing time: 2-4 weeks
  • In-person fingerprinting required

New System (After Jan 5, 2026):

  • Name-based criminal history check
  • Faster processing (estimated 1-2 weeks)
  • Lower cost (amount TBD)
  • No in-person fingerprinting
  • Online submission possible

Who Needs Background Checks:

Owners:

  • All controlling beneficial owners (≥5% ownership financial interest holders)
  • All passive investors (≥5%)
  • All individuals with decision-making authority

Key Employees:

  • Anyone applying for Associated Key License
  • Executive officers
  • Managers with inventory access
  • Compliance officers

Support Staff:

  • Budtenders, packers, trimmers, etc. need Support License
  • Background check required but less extensive

Criminal History Disqualifications:

Automatic Disqualification (10 years):

  • Felony conviction related to controlled substances
  • Felony conviction related to fraud, deceit, embezzlement
  • Any felony involving violence

Discretionary Disqualification:

  • MED may deny based on other criminal history
  • Consider: nature of crime, time elapsed, rehabilitation
  • Misdemeanor marijuana convictions (pre-legalization) generally NOT disqualifying

How to Appeal Denial:

  • Request administrative hearing (within 30 days)
  • Present evidence of rehabilitation
  • Provide character references
  • Demonstrate compliance with all other requirements

2.4 Social Equity Licensing

PURPOSE: Promote participation in the marijuana industry by individuals from communities disproportionately impacted by marijuana prohibition.

ELIGIBILITY CRITERIA (Effective February 1, 2025):

NEW CRITERIA for applications after Feb 1, 2025:

Applicants must demonstrate at least ONE of the following:

Option A: Residency in Disproportionately Impacted Area

  • Lived in designated “opportunity zone” for 15+ years between 1980-2010

Option B: Low-Income Qualification

  • Household income ≤ 50% of state median for at least 5 years

Option C: Prior Marijuana Conviction

  • Arrested or convicted for marijuana offense that would now be legal
  • Conviction occurred in Colorado
  • Can be expunged under current law

Option D: Immediate Family Member Convicted

  • Parent, sibling, spouse, or child convicted of marijuana offense
  • Would now be legal under current Colorado law

Benefits of Social Equity Designation:

✅ Accelerator License eligibility (fast-track cultivation/manufacturing) ✅ Fee waivers or reductions ✅ Technical assistance from MED ✅ Priority application processing ✅ Access to training programs ✅ Mentorship opportunities

How to Apply:

  • Submit Finding of Suitability application
  • Include social equity documentation (proof of residency, income records, conviction records, etc.)
  • MED reviews and determines eligibility
  • If approved, proceed with license application

Accelerator License Details:

  • Temporary license (2 years max)
  • Operates as cultivation or manufacturing facility
  • Lower fees than standard license
  • Converts to standard license after period
  • Technical assistance provided

2.5 License Fees & Renewal Timeline

INITIAL LICENSE FEES (Effective Dec 4, 2024):

License Type Application Fee Initial License Fee

Cultivation Tier 1 (1-1,800 plants) $2,000 $2,750

Cultivation Tier 2 (1,801-6,000) $5,000 $5,750

Cultivation Tier 3 (6,001-10,200) $14,000 $14,750

Products Manufacturer $2,500 $3,750

Marijuana Store (Medical/Retail) $2,500 $3,750

Testing Facility $2,500 $3,750

Transporter $500 $1,000

Accelerator (Social Equity) $0-$500 Reduced/Waived

RENEWAL FEES (TWO-YEAR LICENSE):

As of recent rule changes, most licenses are now two-year duration.

First payment: Due at initial license issuance Second payment: Due at midpoint (12 months later) Renewal: Due after 24 months

Example:

  • License issued January 1, 2025
  • First payment: January 1, 2025
  • Second payment: January 1, 2026 (Industry Bulletin 25-08 reminder sent)
  • Renewal application: December 1, 2026 (30 days before expiration)
  • License expires: January 1, 2027

RENEWAL PROCESS:

Timeline: 90-30 days before expiration

  • MED sends renewal notice via email

  • Log into MED portal

  • Update any changed information (ownership, address, etc.) Upload required renewal documents:

  • Current local license

  • Updated financial statements

  • Environmental compliance report (cultivation only)

  • Proof of insurance

  • Background checks (if ownership changed)

  • Pay renewal fee

  • Submit renewal application

Required Documents for Cultivation Renewal:

  • Electricity usage report (all power sources)
  • Environmental impact statement
  • Water usage documentation
  • If using renewable energy, provide proof

LATE RENEWAL PENALTIES:

  • 1-30 days late: $500 penalty + late fee
  • 31-60 days late: $1,000 penalty + license suspension risk
  • 60+ days late: License automatically revoked (must reapply)

⚠️ DO NOT operate after license expiration. Operating with expired license = unlicensed operation = criminal violation.

2.6 Controlling Beneficial Ownership (CBO) Requirements

WHO IS A CBO?

Controlling Beneficial Owner = Any person with:

  • ≥5% ownership (direct or indirect financial interest), OR
  • Decision-making authority over the business

Examples of CBOs:

  • 100% owner of LLC
  • 25% partner in partnership
  • 10% shareholder in corporation
  • Investor with 5% equity stake
  • CEO with operational authority (even if 0% ownership)
  • Board member with voting rights on major decisions

Disclosure Requirements:

ALL CBOs must be disclosed on license application:

  • Full legal name
  • Date of birth
  • Social security number
  • Home address
  • Ownership percentage (if applicable)
  • Role/title in business
  • Criminal history
  • Financial interest amount

Background Checks:

Every CBO must pass background check (name-based as of Jan 5, 2026)

Adding New CBOs After License Issued:

  • Notify MED within 10 days of ownership change
  • Submit updated ownership structure diagram
  • New CBO submits background check
  • MED approval required BEFORE change takes effect
  • Pay change fee: $100-$500

Failure to disclose CBOs = automatic license denial or revocation.

Example - Complex Ownership:

ABC Cannabis LLC is owned by:

  • John Smith - 60% (CBO - must disclose)
  • XYZ Holdings Corp - 40% (CBO - must disclose)

XYZ Holdings Corp is owned by:

  • Jane Doe - 15% (CBO - must disclose, indirect >5%)
  • Mike Johnson - 10% (CBO - must disclose, indirect >5%)
  • 100 other shareholders - 75% (each <1%) (NOT CBOs individually, but XYZ Holdings itself is CBO)

Total CBOs to disclose: John Smith, XYZ Holdings Corp, Jane Doe, Mike Johnson

PART 3: METRC COMPLIANCE (COLORADO-SPECIFIC)

3.1 Colorado Metrc Requirements

MANDATORY SYSTEM:

ALL licensed businesses (except transporters) must use Metrc:

  • Cultivation facilities
  • Manufacturing facilities
  • Retail stores
  • Testing facilities (for receiving samples)

What Metrc Tracks:

  • Individual plants (immature and mature)
  • Harvested plant material (packages)
  • Manufactured products (packages)
  • Sales to patients/customers
  • Transfers between licensees
  • Waste and disposal
  • Testing results

Metrc Account Activation:

BEFORE you can operate:

  • License approved by MED
  • MED creates Metrc account for your license
  • You receive Metrc credentials via email
  • Complete New Business Fundamentals Training
  • Activate account
  • Order RFID tags (plant tags and package labels)
  • Begin inventory tracking

Cost of Tags:

  • Plant tags: ~$0.60-$0.80 each (must purchase from Metrc)
  • Package labels: ~$0.25-$0.40 each
  • Minimum order quantities apply

Tags are serialized and tracked to your license number.

3.2 Sync Requirements: 15-Minute Maximum

COLORADO REQUIREMENT:

Maximum delay between action and Metrc update: 15 minutes

This means:

  • Sale to customer → Metrc updated within 15 minutes
  • Plant harvest → Metrc updated within 15 minutes
  • Transfer between licensees → Metrc updated within 15 minutes
  • Waste disposal → Metrc updated within 15 minutes

How Most POS Systems Handle This:

  • Real-time sync: Immediate push to Metrc (recommended)
  • Batch sync: Every 5-10 minutes (acceptable if <15 min)
  • Manual entry: You manually update Metrc (NOT recommended)

Acceptable Variance: ±15 minutes for time-stamped transactions

NOT Acceptable:

  • End-of-day sync (once per day)
  • Weekly batch updates
  • “We’ll update Metrc when we remember”

MED Audit Check: Auditors will select random transactions and verify Metrc timestamp ≤15 minutes from POS timestamp.

Penalty for Sync Violations:

  • First offense: $2,500-$5,000 + corrective action required
  • Repeat offense: $5,000-$10,000 + compliance monitoring
  • Chronic violations: License suspension

3.3 RFID Tag Requirements (All Plants & Packages)

RFID = Radio Frequency Identification

Colorado requires physical RFID tags on:

  • All plants (once they move from immature to tracked status)
  • All packages (harvest batches, manufactured products)

Tag Colors:

  • Yellow tags: Medical marijuana
  • Blue tags: Retail marijuana

NEVER mix tag colors. Medical inventory gets yellow, retail gets blue.

Plant Tag Requirements:

When to tag plants:

  • Immature plants (<8” tall, <8” wide, in 2” container): NOT tagged
  • Once plant exceeds immature definition: MUST be tagged within 24 hours
  • Tag stays with plant through entire life cycle

How to attach plant tag:

  • Affix to main stalk/stem
  • Tag must be visible and scannable
  • Cannot obstruct plant growth
  • Replace if damaged (document in Metrc)

Package Tag Requirements:

When to tag packages:

  • Harvest batch created: Apply package label
  • Manufactured product: Apply package label
  • Products must remain in tagged packages until sold to end consumer

Package label must include:

  • RFID chip (embedded in label)
  • Package UID (unique identifier - barcode)
  • License number (preprinted)

Penalties for Missing/Damaged Tags:

  • Missing tag on plant: $100-$500 per plant
  • Missing tag on package: $100-$500 per package
  • Systematic tagging failures: License suspension

Best Practices:

  • Order tags 4-6 weeks in advance (inventory lead time)
  • Keep backup stock of tags on hand (minimum 90-day supply)
  • Document any damaged/replaced tags in Metrc
  • Never reuse tags (each is single-use)

3.4 API Security & Credential Management

API KEY = Your POS System’s Password to Metrc

Colorado MED specifically audits for API key security.

STEP 1: Generate API Key

  • Log into Metrc: https://co.metrc.com
  • Click Admin → API Access
  • Generate new API key
  • COPY IMMEDIATELY (shown once only)

STEP 2: Store Securely

✅ APPROVED METHODS:

  • Password manager (1Password, Bitwarden, LastPass)
  • Secrets management vault (HashiCorp Vault, AWS Secrets Manager)
  • Encrypted configuration file (with proper key management)

❌ VIOLATIONS (MED will cite you):

  • Plain text file on desktop
  • Email to yourself or POS vendor
  • Sticky note
  • Unencrypted Excel spreadsheet
  • GitHub repository
  • Slack/Teams message
  • POS config file without encryption

STEP 3: Rotation Schedule

Colorado MED Requirement: Every 90 days

30 days before rotation:

  • Schedule rotation during low-traffic time
  • Notify POS vendor

Day of rotation:

  • Generate new key
  • Update POS system
  • Test sync
  • Monitor for 24 hours
  • Deactivate old key

Document rotation in compliance log:

  • Date rotated
  • Old key deactivated
  • New key activated
  • Tested by: [Name]
  • Result: Success

STEP 4: Access Logging

Enable API access logging in Metrc:

  • Track all API calls
  • Monitor for unusual patterns
  • Review logs weekly
  • Alert on failed authentication attempts

Red flags:

  • API calls from unknown IP addresses
  • Calls outside business hours (unless 24/7 operation)
  • High volume of failed requests
  • API calls after employee termination

Penalty for API Security Violations:

  • Improper storage: $2,500-$10,000
  • Failure to rotate: $1,000-$5,000
  • Compromised credentials not reported: $5,000-$15,000 + MED monitoring

3.5 Daily Reconciliation Procedures

REQUIRED: Daily inventory reconciliation

Colorado MED expects daily comparison:

  • POS inventory
  • Metrc inventory
  • Physical inventory (spot checks)

Every Morning Procedure:

STEP 1: Generate Reports (as of midnight)

  • POS inventory report (export to Excel/CSV)
  • Metrc inventory report (Packages → Active)
  • Save both reports with date stamp

STEP 2: Compare Line-by-Line

Create reconciliation spreadsheet:

Package UID POS Quantity Metrc Quantity Variance Notes

1A4060… 100 units 100 units 0 ✅ Match

1A4061… 50 units 48 units -2 ⚠️ Investigate

STEP 3: Investigate Discrepancies

Acceptable variance: ±2 units OR ±2% by weight (whichever is smaller)

If discrepancy found:

  • Verify POS data entry (any errors?)
  • Check Metrc for failed sync attempts
  • Conduct physical count of affected package
  • Determine root cause

Common causes:

  • Manual POS adjustment not synced to Metrc
  • Metrc sync failure overnight
  • Employee error (data entry)
  • Theft/loss (rare but possible)

STEP 4: Resolution

If discrepancy ≤ acceptable variance:

  • Adjust POS to match physical count
  • Adjust Metrc (with reason code)
  • Document in reconciliation log

If discrepancy > acceptable variance:

  • Conduct full physical count
  • Document findings
  • Report to management
  • If >6 units total: Prepare report for MED

STEP 5: Documentation

Keep records for 3 years:

  • Daily reconciliation spreadsheets
  • Investigation notes
  • Adjustment justifications
  • Physical count documentation

MED Audit: Auditors will request reconciliation records for previous 90 days minimum.

Penalty for Poor Reconciliation:

  • No daily reconciliation: $1,000-$5,000
  • Chronic discrepancies: $5,000-$15,000 + inventory freeze
  • Failure to investigate: $2,500-$7,500

3.6 Common Metrc Violations & Penalties

Top 10 Colorado Metrc Violations:

Violation Penalty Range How to Avoid

Inventory discrepancy >6 units $5,000-$15,000 Daily reconciliation, proper training

API key stored in plain text $2,500-$10,000 Use password manager

Sync delay >15 minutes $2,500-$5,000 Configure real-time sync

Missing/damaged RFID tags $100-$500 per tag Proper tag handling, maintain backup stock

Failed test batch not quarantined $5,000-$10,000 Immediate quarantine procedures

Terminated employee still has access $1,000-$5,000 Disable within 24 hours of termination

No two-factor authentication $1,000-$3,000 Enable 2FA on all admin accounts

Waste disposal not documented $2,500-$7,500 Video + witness + Metrc entry

Transfer manifest not received $1,000-$5,000 Unreceived manifest procedures

Production batch tracking errors $2,500-$7,500 New 2026 production batch training

How MED Discovers Violations:

Routine Audits:

  • Scheduled compliance inspections
  • Random spot checks
  • License renewal audits

Automated Alerts:

  • Metrc system flags discrepancies
  • Inventory variance alerts
  • Failed sync notifications

Complaints:

  • Customer complaints
  • Employee reports
  • Competitor allegations

Third-Party Reports:

  • Local law enforcement
  • Testing lab failures
  • Banking irregularities

PART 4: CULTIVATION COMPLIANCE

4.1 Plant Count Limits

Three-Tier System:

Tier 1: 1-1,800 plants

  • Application fee: $2,000
  • Initial license fee: $2,750
  • Best for: Small craft cultivators, startups

Tier 2: 1,801-6,000 plants

  • Application fee: $5,000
  • Initial license fee: $5,750
  • Best for: Mid-size operations, established businesses

Tier 3: 6,001-10,200 plants

  • Application fee: $14,000
  • Initial license fee: $14,750
  • Best for: Large-scale cultivation, MSO operations

Plant Count Defined:

  • Counts ALL plants in flowering stage
  • Does NOT count immature plants (if properly defined)
  • Does NOT count mother plants (if maintained as immature)
  • DOES count vegetative plants if >8” tall/wide or out of 2” container

New for 2026: Mixed Indoor/Outdoor Inventory Limits

If you operate both indoor and outdoor cultivation:

  • Must maintain separate inventory tracking
  • New limits apply to total production (details in Jan 5, 2026 rules)

Exceeding Plant Count:

  • Over by 1-10%: $2,500-$5,000 fine
  • Over by 10-25%: $5,000-$10,000 fine + compliance monitoring
  • Over by >25%: License suspension + potential criminal charges

How MED Counts Plants:

During inspection:

  • Physical count of all flowering plants
  • Physical count of vegetative plants (>immature definition)
  • Compare to Metrc plant count
  • Verify against licensed tier

Best Practice:

  • Stay 5-10% under your tier maximum
  • Allows buffer for plant count errors
  • Account for accidental germination
  • Room for mother plant clones

DOWNLOAD COMPLETE COLORADO GUIDE

This preview shows the first 4 parts. The complete guide includes:

✅ Parts 5-15: Manufacturing, testing, retail, packaging, security, advertising, transport, employees, enforcement, audits, special topics ✅ 50+ annotated screenshots: Metrc, MED portal, forms, examples ✅ 30+ downloadable templates: Checklists, SOPs, forms, logs ✅ State penalty matrix: Complete violation/fine reference ✅ 2026 rule changes: Detailed analysis of January 5, 2026 updates ✅ Case studies: Real Colorado violations and how to avoid them

Total Length: 95 pages Last Updated: December 20, 2025 Next Update: January 10, 2026 (after new rules effective)

[DOWNLOAD FULL COLORADO GUIDE - PDF] [DOWNLOAD TEMPLATES (ZIP)]